Home • Hashes • Research • About • Swag Shop

System currently contains 112,309,862 malware samples.

Report for a sample recently added to the system:

25b80ece57a36eec576494cc1e25ddacb84789125d6290f8437c647b0cab43df
VirusShare info last updated 2026-05-02 00:00:00 UTC
MD5	adbb4201a9fc34516c88e89b3d8d72c3
SHA1	60205892ab7d57f84ec3c08da6468cfe8a04028d
SHA256	25b80ece57a36eec576494cc1e25ddacb84789125d6290f8437c647b0cab43df
SSDeep	768:qMRwcVruOH+p4TADnbIDOR0783djifL4q+OrFETPMiu:zRw0rwDnbWyq5V
Authentihash	98ffc79d99a490d7bf0cfc25ada346987144dc029e1f9a8c5c8a0adf469ab470
Size	52,841 bytes
File Type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Win32 Executable (generic) (35.7%) Windows Icons Library (generic) (16.3%) OS/2 Executable (generic) (16.1%) Generic Win/DOS Executable (15.8%) DOS Executable Generic (15.8%)
Detections (32/71)	ALYac Gen:Trojan.Heur.dGY@Xk1bbRli APEX Malicious Arcabit Trojan.Heur.E62C66 BitDefender Gen:Trojan.Heur.dGY@Xk1bbRli Bkav W32.AIDetectMalware CTX exe.trojan.xk1bbrli CrowdStrike win/malicious_confidence_100% (D) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS ESET-NOD32 Win32/Agent_AGen.GXY trojan Elastic malicious (high confidence) Emsisoft Gen:Trojan.Heur.dGY@Xk1bbRli (B) Fortinet W32/Agent_AGen.GXY!tr GData Gen:Trojan.Heur.dGY@Xk1bbRli Google Detected Kaspersky VHO:Packed.Win32.Morphine.gen Kingsoft malware.kb.a.918 Malwarebytes MachineLearning/Anomalous.100% McAfeeD ti!25B80ECE57A3 MicroWorld-eScan Gen:Trojan.Heur.dGY@Xk1bbRli Microsoft Trojan:Win32/Wacatac.B!ml NANO-Antivirus Virus.Win32.Gen.ccmw Rising Malware.Undefined!8.C (TFE:2:p4g3wHBaTlP) SentinelOne Static AI - Suspicious PE Sophos ML/PE-A Symantec ML.Attribute.HighConfidence TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9z VBA32 BScope.Trojan.Wacatac VIPRE Gen:Trojan.Heur.dGY@Xk1bbRli Varist W32/Agent.MFY.gen!Eldorado VirIT Trojan.Win32.GenHeur.D VirusTotal Report submitted 2026-04-30 11:43:27 UTC
ExIF Data	CodeSize 11776 EntryPoint 0x3886 FileSize 52 kB FileType Win32 EXE FileTypeExtension exe ImageFileCharacteristics Executable, No line numbers, No symbols, 32-bit, No debug ImageVersion 1 InitializedDataSize 7680 LinkerVersion 2.44 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 4 PEType PE32 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2026:04:29 05:27:43+00:00 UninitializedDataSize 512