Home • Hashes • Research • About • Swag Shop

System currently contains 114,040,555 malware samples.

Report for a sample recently added to the system:

cd19e3a9d7f91b7bb261db71afdf99b86dfc680bf1a38807a789f7ba24994721
VirusShare info last updated 2026-06-15 00:00:00 UTC
MD5	fb53283a4340e14065c1d3b916ab86bd
SHA1	fbb9070813d4cfe086d2609fee3b24991b59ef99
SHA256	cd19e3a9d7f91b7bb261db71afdf99b86dfc680bf1a38807a789f7ba24994721
SSDeep	24576:5nndbmV9QToaqMsQGuL51azTt9fyIXhKjuj7loLRWlp7:nbmGy2Uzx9fyIXAjUhplp7
Authentihash	3c7e8b3135218519b88dac5f2a9c3d349520d5bb75d1170aa41c8591e65001db
Size	1,051,792 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Win64 Executable (generic) (55.2%) Win32 Executable (generic) (23.6%) Generic Win/DOS Executable (10.5%) DOS Executable Generic (10.5%)
Detections (23/58)	AhnLab-V3 PUP/Win32.Downloader.C1449029 CTX exe.trojan.moderate CrowdStrike win/grayware_confidence_90% (D) Cylance Unsafe Cynet Malicious (score: 100) Elastic malicious (moderate confidence) Google Detected Gridinsoft Trojan.Win32.Downloader.oa!s1 Kingsoft malware.kb.a.983 Lionic Trojan.Win32.Generic.4!c Malwarebytes PUP.Optional.RegNow McAfeeD ti!CD19E3A9D7F9 Microsoft Trojan:Win32/Wacatac.B!ml Paloalto generic.ml Rising Backdoor.ParallaxRat!8.125D6 (RDMK:cmRtazpovlKaockKDlx+dgnX5+R8) Skyhigh BehavesLike.Win32.Dropper.th Sophos Generic ML PUA (PUA) Symantec ML.Attribute.HighConfidence Trapmine malicious.moderate.ml.score TrellixENS GenericRXWW-BR!FB53283A4340 Varist W32/ABApplication.ULCM-3451 Xcitium Application.Win32.Fourthrem.YU@6ftwpr Zillya Trojan.GenericKD.Win32.41040 VirusTotal Report submitted 2026-06-10 20:23:15 UTC
ExIF Data	CharacterSet Windows, Latin1 CodeSize 729088 CompanyName RegNow.com EntryPoint 0x90d3d FileDescription RegNow Download Manager FileFlags (none) FileFlagsMask 0x003f FileOS Win32 FileSize 1027 kB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion 1.0.0 FileVersionNumber 1.0.7.1 ImageFileCharacteristics No relocs, Executable, 32-bit ImageVersion 0 InitializedDataSize 307200 InternalName RegNow Download Manager LanguageCode English (U.S.) LegalCopyright © RegNow.com LinkerVersion 8 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 4 ObjectFileType Executable application OriginalFileName DldManager.exe PEType PE32 ProductName RegNow Download Manager ProductVersion 1.0.0 ProductVersionNumber 1.0.7.1 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2009:09:14 15:54:33+00:00 UninitializedDataSize 0