Home • Hashes • Research • About • Swag Shop

System currently contains 106,279,202 malware samples.

Report for a sample recently added to the system:

4a4861f2114d99e4384c18678f19d7da7a09d359f9cfc021c8791814c4fbe8a9
VirusShare info last updated 2025-11-30 00:00:00 UTC
MD5	13f4d7a3b38014f361fe8378953f5272
SHA1	9ca93ec635592e572a31cc4d401224d3280d105e
SHA256	4a4861f2114d99e4384c18678f19d7da7a09d359f9cfc021c8791814c4fbe8a9
SSDeep	6144:bBcSdtUgfIk6GCBes2xMdLRmkw5HJZ5EAhsqFbdojDuUlk4iJ6qO:bDGgfIkXCBepCdLsZ5EWeDuUlkmx
Authentihash	ae45eee576ea3ffe910edfa7f2bb457e6bb130245807dc63d144e695937b82d2
Size	444,300 bytes
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Mime Type	application/x-dosexec
Extension	exe
TrID	Windows Control Panel Item (generic) (34.5%) InstallShield setup (25.8%) Win32 Executable MS Visual C++ (generic) (18.7%) Win64 Executable (generic) (6.3%) Win32 Dynamic Link Library (generic) (3.9%)
Detections (1/72)	Microsoft Trojan:Win32/Wacatac.B!ml VirusTotal Report submitted 2025-11-29 01:11:54 UTC
ExIF Data	CharacterSet Unicode CodeSize 289792 CompanyName EntryPoint 0x2aca8 FileDescription Setup FileFlags Pre-release, Private build FileFlagsMask 0x003f FileOS Win32 FileSize 434 kB FileSubtype 0 FileType Win32 EXE FileTypeExtension exe FileVersion 8.0.50727.42 (RTM.050727-4200) FileVersionNumber 8.0.50727.42 ImageFileCharacteristics No relocs, Executable, 32-bit ImageVersion 8 InitializedDataSize 139776 InternalName setup.exe LanguageCode English (U.S.) LegalCopyright © Microsoft Corporation. All rights reserved. LinkerVersion 8 MIMEType application/octet-stream MachineType Intel 386 or later, and compatibles OSVersion 5 ObjectFileType Executable application OriginalFileName setup.exe PEType PE32 ProductName ProductVersion 8.0.50727.42 ProductVersionNumber 8.0.50727.42 Subsystem Windows GUI SubsystemVersion 4 TimeStamp 2005:09:23 10:45:29+00:00 UninitializedDataSize 0