Home • Hashes • Research • About • Swag Shop

System currently contains 112,335,974 malware samples.

Report for a sample recently added to the system:

883e4068537102e2c1793e6a8a7f6b43f15bb2412dc6c3b3dd6dfffffe74f5b4
VirusShare info last updated 2026-05-04 00:00:06 UTC
MD5	ab99ba9a101209ebefe9d4265b3042d4
SHA1	0d25e31643770c981596152da87f2b1cff7634c8
SHA256	883e4068537102e2c1793e6a8a7f6b43f15bb2412dc6c3b3dd6dfffffe74f5b4
SSDeep	24576:ge6u/pjD3RSWCdhpSEc9SfHfiq0ehETxqkCZMOJ0o7B1n14dFi6su:gOBjzY5K3YgzCZMaF7Bvdu
Authentihash	4aedf76377c6b7a35c70b1203ea351b59c6f0c5b52321e9a3895ea04557c1595
Size	2,097,152 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Win32 Executable MS Visual C++ (generic) (47.3%) Win64 Executable (generic) (15.9%) Win32 Dynamic Link Library (generic) (9.9%) Win16 NE executable (generic) (7.6%) Win32 Executable (generic) (6.8%)
Detections (61/71)	ALYac Trojan.Agent.GOSN APEX Malicious AVG Win32:MiniDuke-G [Trj] AhnLab-V3 Win-Trojan/Agent.697856.K Antiy-AVL Trojan/Win32.Agent Arcabit Trojan.Agent.GOSN Avast Win32:MiniDuke-G [Trj] Avira TR/Taranis.2603 BitDefender Trojan.Agent.GOSN Bkav W32.FamVT.FVDATTc.Worm CTX exe.trojan.gosn ClamAV Win.Trojan.CosmicDuke-3 CrowdStrike win/malicious_confidence_100% (D) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS DrWeb Trojan.PWS.Siggen1.28564 ESET-NOD32 Win32/PSW.Agent.NYQ trojan Elastic malicious (high confidence) Emsisoft Trojan.Agent.GOSN (B) F-Secure Trojan.TR/Taranis.2603 Fortinet W32/Agent.NYQ!tr GData Win32.Trojan.PSE.11BDIJM Google Detected Gridinsoft Trojan.Win32.Agent.sb!s1 Ikarus Trojan-Dropper.Win32.Miniduke Jiangmin Backdoor/CosmicDuke.a K7AntiVirus Trojan ( 004cc2f11 ) K7GW Trojan ( 004cc2f11 ) Kaspersky HEUR:Backdoor.Win32.CosmicDuke.gen Kingsoft malware.kb.a.1000 Malwarebytes Crypt.Trojan.Malicious.DDS MaxSecure Trojan.Malware.326154991.susgen McAfeeD Real Protect-LS!AB99BA9A1012 MicroWorld-eScan Trojan.Agent.GOSN Microsoft TrojanDropper:Win32/Miniduke!pz NANO-Antivirus Trojan.Win32.Agent.enwtvt Panda Trj/Genetic.gen Rising Stealer.Agent!1.A6DB (CLASSIC) Sangfor Trojan.Win32.Save.a SentinelOne Static AI - Malicious PE Skyhigh Dropper-FPF!AB99BA9A1012 Sophos Troj/CosDuke-B Symantec ML.Attribute.HighConfidence Tencent Trojan-Dropper.Win32.Miniduke.wa Trapmine malicious.high.ml.score TrellixENS Dropper-FPF!AB99BA9A1012 TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9z VBA32 Backdoor.CosmicDuke VIPRE Trojan.Agent.GOSN Varist W32/Trojan.DIRN-7729 ViRobot Trojan.Win32.CosmicDuke.697856 VirIT Trojan.Win32.X-Paxxes.BMQP Webroot W32.Malware.gen Xcitium Backdoor.Win32.CosmicDuke.PA@8f3l90 Yandex Trojan.GenAsa!wsMRv9Mmbj0 Zillya Trojan.Agent.Win32.471810 ZoneAlarm Troj/CosDuke-B Zoner Trojan.Win32.23888 alibabacloud Trojan[dropper]:Win/Psw.64dc04a9 huorong TrojanSpy/CosmicDuke.c VirusTotal Report submitted 2026-04-27 17:16:13 UTC
ExIF Data	CodeSize 136704 EntryPoint 0x89eb FileSize 2.0 MB FileType Win32 EXE FileTypeExtension exe ImageFileCharacteristics No relocs, Executable, 32-bit ImageVersion 0.3 InitializedDataSize 512 LinkerVersion 10.25 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 5.1 PEType PE32 Subsystem Windows GUI SubsystemVersion 5.1 TimeStamp 1997:08:20 12:02:36+00:00 UninitializedDataSize 0