Malicious
38 of 68 engines flag the unsigned rare_new PE with tier-1 consensus on Convagent/Dacic family.
6bb13b556d2f002955…e173d42294The verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
Strong tier-1 consensus (11 malicious, 5 engines naming the same family) combined with an unsigned state and rare_new prevalence outweighs the lack of sandbox or network telemetry. Multiple high-trust engines independently surface Convagent or Dacic labels, confirming the threat family. The filename Fortnite Public.exe is a common social-engineering lure but does not alter the engine evidence. No prior clean RAG matches exist to offset the current signals.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
engines.tier1Malicious=11 and tier1FamilyConsensus.strong=true (win64, 5 engines)
signing.verified=false, signerStats.found=false
prevalence.classification=rare_new, ageDays=0
topDetections: Microsoft (Trojan:Win64/Convagent.RVA!MTB), Kaspersky (HEUR:Trojan.Win64.Convagent.gen), ESET-NOD32 (Win64/Agent_AGen.MCC trojan)
popularThreatLabel=trojan.dacic/convagent
- No malicious sandbox verdict recorded
- No contacted malicious hosts
- No dropped malicious children
- Unsigned executable
- rare_new prevalence (single submission)
- tier-1 family consensus on Convagent/Dacic
- social-engineering filename
Treat as malicious; avoid execution and remove the file immediately.
dacic corroborated by 2 sources
- VT (73 engines)dacic
- MT AI Engineconvagent
38 detections across 73 engines
Section entropy & packers
Section-level entropy and packer detection from the PE header. Nothing suspicious here — entropy is within the normal range for unpacked code.
How often this file shows up in the wild
Barely seen in the wild and first surfaced recently. This is the footprint of targeted malware the AV industry hasn't signatured yet — extra scrutiny is warranted.
Forensic fingerprint
- File name
- Fortnite Public.exe
- Size
- 1.09 MB
- MIME type
- (unknown)
- Detected type
- Win32 EXE
- SHA-256
- 6bb13b556d2f002955a5d096115eedf3a511e95df969b4d4cbdb46e173d42294
- MD5
- 0cd612bdf6c929b75573bfb3d3cab0ab
- SHA-1
- 8b09a87ab29fafbd261b1cdf5c63fedd6b70dbb3
- PE imphash
- 73f461c771aef77ec43d53a0c54f0c8d
- First seen (VT)
- 7/7/2026, 1:30:45 PM
- Last analysis (VT)
- 7/7/2026, 1:30:45 PM
- First scan (MalwareTips)
- 7/7/2026, 1:39:11 PM
- Last scan (MalwareTips)
- 7/7/2026, 1:39:11 PM
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.