Home • Hashes • Research • About • Swag Shop

System currently contains 109,028,243 malware samples.

Report for a sample recently added to the system:

b4697c007a1784e24e93e9ef741b8df60ded68809075cb2adbd7b3de6dfaee8e
VirusShare info last updated 2026-02-12 00:00:00 UTC
MD5	d364e4bf359df5f78cdb6237d578152f
SHA1	db77a6421af0a9f36775a4d64bebbfc6db63343a
SHA256	b4697c007a1784e24e93e9ef741b8df60ded68809075cb2adbd7b3de6dfaee8e
SSDeep	1536:EMq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuM:tWNqkOJWmo1HpM0MkTUmuM
Authentihash	de6ccfff441b71861ae3ab8ff02026844b6c51e1183d4ee7c9bb6479eb4f091a
Size	85,034 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
Mime Type	application/x-dosexec
Extension	exe
TrID	Win32 EXE PECompact compressed (v2.x) (49.9%) Win32 EXE PECompact compressed (generic) (35.1%) Win16 NE executable (generic) (4.2%) Win32 Executable (generic) (3.8%) Windows Icons Library (generic) (1.7%)
Detections (56/71)	ALYac Trojan.Agent.EVKN APEX Malicious AVG Win32:Evo-gen [Trj] AhnLab-V3 Trojan/Win32.Swisyn.R262946 Arcabit Trojan.Agent.EVKN Avast Win32:Evo-gen [Trj] Avira TR/Crypt.PEPM.Gen BitDefender Trojan.Agent.EVKN Bkav W32.AIDetectMalware CTX exe.trojan.evkn ClamAV Win.Malware.Swisyn-6911464-0 CrowdStrike win/malicious_confidence_100% (D) Cylance Unsafe Cynet Malicious (score: 100) DeepInstinct MALICIOUS DrWeb Trojan.Siggen6.54687 ESET-NOD32 Win32/VB.OSK trojan Elastic malicious (high confidence) Emsisoft Trojan.Agent.EVKN (B) F-Secure Trojan.TR/Crypt.PEPM.Gen Fortinet W32/VB.QOT!tr GData Win32.Trojan.PSE.126403N Google Detected Gridinsoft Ransom.Win32.Zbot.oa!s1 Ikarus Trojan.Win32.Delf Jiangmin Trojan/PSW.Lmir.dah K7AntiVirus Trojan ( 00092db21 ) K7GW Trojan ( 00092db21 ) Kaspersky Trojan.Win32.Swisyn.bner Kingsoft malware.kb.b.997 Malwarebytes Malware.AI.1630207319 MaxSecure Trojan.Malware.300983.susgen McAfeeD Real Protect-LS!D364E4BF359D MicroWorld-eScan Trojan.Agent.EVKN Microsoft Trojan:Win32/Phonzy.B!ml NANO-Antivirus Trojan.Win32.Swisyn.fouerd Panda Trj/Genetic.gen Rising Trojan.VB!8.B20 (TFE:3:Br4o3idVygG) Sangfor Suspicious.Win32.Save.a SentinelOne Static AI - Malicious PE Skyhigh BehavesLike.Win32.Trojan.mc Sophos Troj/VB-JVT Tencent Trojan.Win32.Swisyn.ca Trapmine malicious.high.ml.score TrellixENS W32/Swisyn.ag VBA32 Trojan.VB.01049 VIPRE Trojan.Agent.EVKN Varist W32/Trojan.CPXN-1141 VirIT Trojan.Win32.GenX.AD Webroot W32.Trojan.Gen Xcitium TrojWare.Win32.Trojan.XPACK.Gen@2ho5ur Yandex Trojan.Swisyn!C8tYl9Z9HEk Zillya Trojan.Swisyn.Win32.35153 ZoneAlarm Troj/VB-JVT alibabacloud Trojan:MSOffice/Swisyn.58aab74d huorong Trojan/Agent.w VirusTotal Report submitted 2026-02-06 18:51:08 UTC
ExIF Data	CodeSize 176128 EntryPoint 0x3670 FileSize 83 kB FileType Win32 EXE FileTypeExtension exe ImageFileCharacteristics No relocs, Executable, No line numbers, No symbols, 32-bit ImageVersion 1 InitializedDataSize 12288 LinkerVersion 6 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 4 PEType PE32 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2011:06:14 19:01:16+00:00 UninitializedDataSize 0 Warning Error processing PE data dictionary