System currently contains 121,051,230 malware samples.
| ebb141236c0dcbab0e31313478a9652703ba8af6cedfe0bed0f93954e5968c74 |
| VirusShare info last updated 2026-11-14 00:00:00 UTC |
|
|
| MD5 | fff16ee593cd04751e69868e6f307278 |
| SHA1 | a5b30ee07fde4427d0100c1036c61bc4fb8132ed |
| SHA256 | ebb141236c0dcbab0e31313478a9652703ba8af6cedfe0bed0f93954e5968c74 |
| SSDeep | 49152:QqRMth1qYQE7ClqgTUayHChFx4s+1Ymswstsgses8sBshsRs2sTs2s1sssqsnsIY:QqRsh1qYQE7ClqiUayHChFxkYhx |
| Authentihash | c5992856144bb8a3cb07a56b5d92f4eeec40bd9367f5b085ee53dbfee271bc4b |
| Size | 4,898,816 bytes |
| File Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| Mime Type | application/x-dosexec |
| Extension | exe |
| TrID | InstallShield setup (41.4%)
Win32 EXE PECompact compressed (generic) (40.0%)
Win64 Executable (generic) (6.2%)
Win32 Executable (generic) (4.3%)
Win16/32 Executable Delphi generic (1.9%)
|
Detections
(42/70) | | ALYac | Gen:Variant.Genie.1412 | | APEX | Malicious | | AVG | Win32:MalwareX-gen [Misc] | | AhnLab-V3 | Trojan/Win.Generic.R802085 | | Alibaba | Trojan:Win32/MalwareX.cb1fd282 | | Arcabit | Trojan.Genie.D584 | | Avast | Win32:MalwareX-gen [Misc] | | Avira | TR/Crypt.XPACK.Gen3 | | BitDefender | Gen:Variant.Genie.1412 | | CTX | exe.unknown.genie | | CrowdStrike | win/malicious_confidence_90% (D) | | Cynet | Malicious (score: 99) | | ESET-NOD32 | Win32/Agent.AIZC trojan | | Elastic | malicious (high confidence) | | Emsisoft | Gen:Variant.Genie.1412 (B) | | F-Secure | Trojan.TR/Crypt.XPACK.Gen3 | | Fortinet | JS/MALD2.03B0!tr | | GData | Gen:Variant.Genie.1412 | | Google | Detected | | Gridinsoft | Trojan.Win32.Generic.lu!heur | | K7AntiVirus | Riskware ( 00584baa1 ) | | K7GW | Riskware ( 00584baa1 ) | | Lionic | Trojan.Win32.Draftor.4!c | | Malwarebytes | RiskWare.Agent | | MaxSecure | Trojan.W32.281026.Evo.gen.YR | | McAfeeD | ti!EBB141236C0D | | MicroWorld-eScan | Gen:Variant.Genie.1412 | | Paloalto | generic.ml | | Panda | Trj/Genetic.gen | | Sangfor | Trojan.Win32.Agent.Vxxn | | Skyhigh | BehavesLike.Win32.Dropper.rm | | Sophos | Mal/Generic-S | | Symantec | Trojan.Gen.MBT | | TACHYON | Trojan/W32.DP-Agent.4898816.B | | Tencent | Malware.Win32.Gencirc.10c4da3f | | Trapmine | malicious.high.ml.score | | TrellixENS | Artemis!FFF16EE593CD | | TrendMicro | Trojan.Win32.DRAFTOR.TL0101JS26ZZ | | TrendMicro-HouseCall | Trojan.Win32.DRAFTOR.TL0101JS26ZZ | | VIPRE | Gen:Variant.Genie.1412 | | Varist | W32/ABTrojan.IGFV-5052 | | Zillya | Trojan.Agent.Win32.4689870 | | VirusTotal Report submitted 2026-11-11 21:48:02 UTC |
|
| ExIF Data | | CharacterSet | Windows, Latin1 | | CodeSize | 2276864 | | CompanyName | X-Ways Software Technology AG | | EntryPoint | 0x22cbc8 | | FileDescription | WinHex | | FileFlags | (none) | | FileFlagsMask | 0x0000 | | FileOS | Win32 | | FileSize | 4.7 MB | | FileSubtype | 0 | | FileType | Win32 EXE | | FileTypeExtension | exe | | FileVersion | 21.6 | | FileVersionNumber | 21.6.0.0 | | ImageFileCharacteristics | No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi | | ImageVersion | 0 | | InitializedDataSize | 798208 | | InternalName | WINHEX | | LanguageCode | English (U.S.) | | LegalCopyright | © Stefan Fleischmann, X-Ways Software Technology AG 1995-2025 | | LinkerVersion | 2.25 | | MIMEType | application/octet-stream | | MachineType | Intel 386 or later, and compatibles | | OSVersion | 4 | | ObjectFileType | Executable application | | OriginalFileName | WINHEX.EXE | | PEType | PE32 | | ProductName | WinHex | | ProductVersion | 21.6 | | ProductVersionNumber | 21.6.0.0 | | Subsystem | Windows GUI | | SubsystemVersion | 4 | | TimeStamp | 2025:12:10 12:00:00+00:00 | | UninitializedDataSize | 0 |
|
