[clamav-users] FP: Win.Trojan.Agent-1696554 is md5sum of 2240 null bytes

Al Varnell alvarnell at mac.com
Tue Sep 27 05:46:45 EDT 2016


On Sep 27, 2016, at 2:26 AM, David Shrimpton <d.shrimpton at its.uq.edu.au> wrote:
> Is the original malware sample for which the signature was intended still available
> and does it have the above sha256sum ?

Apparently available from the VT link Steve gave with the following file names:

013167adc0b9fbc908390023f9c078009599ec95.IN_
044.PART.MET
SAVESLOT2
SAVESLOT3
001.PART.MET
044.PART.MET.BAK

And yes, the same SHA256 as you listed.

-Al-


More information about the clamav-users mailing list