File scan report
Verdict Low Risk
Is stvoy HM. v1. 10 safe? Not fully confirmed.
Unsigned 15-year-old executable with zero engine detections and minimal external intel.
Why not Safe? It has no verified publisher signature and only one source had seen it when we scanned it.
Limited evidence · Nothing points to a problem, but little confirms who made it.
Do not execute without further verification; obtain sandbox results or more evidence before trusting the file.
Good practice2 tips
Low Risk: no threat found, but we could not fully confirm this file.
Get it from the publisher's own website or app store, not from a re-upload or a link someone sent you.
Keep your security software on, and stop if the file does anything you didn't expect.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 73 flagged
- Flagged 0
- No detection 73
- No result 4
- Code signing Unsigned
- Test run Completed
- First seen 15y ago
Chapter 02
Why we think so
3 points against it and 2 in its favour, checked against the scan evidence.
The reasoning behind this verdict
No antivirus engine flagged the file and no major consensus exists. A single community YARA rule matched, but the sample remains rare and unsigned with no sandbox or host-reputation data available.
The complete absence of malicious detections across 77 engines, including 18 major antivirus engines reporting clean, is a strong benign indicator. However, the file is unsigned, has only been seen once since 2011, and lacks any sandbox or contacted-host analysis. The single YARAify rule match is inconclusive without additional context. Limited evidence and missing evidence from the test run prevent a confident classification.
What We Detected
77 engines scanned the sample; none returned a malicious or suspicious result. One community YARA rule (Check_OutputDebugStringA_iat) triggered on YARAify, but no named malware family was identified.
Threat Behavior
No sandbox execution data, no contacted domains or IPs, and no files it created were recorded. The file remains unsigned with no signer history.
What To Do Now
Because coverage and evidence from the test run are limited, treat the file as untrusted until additional analysis (sandbox execution, code review, or more evidence) can be obtained. Keep security software enabled.
Where this verdict could be wrong2 caveats
- Single YARAify rule match could indicate either benign anti-debugging code or an undetected malicious sample; rule coverage gaps prevent definitive interpretation.
- File age of 5580 days with only one submission suggests either a very niche legitimate tool or an old undetected threat that never spread.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- zero malicious detections across 77 engines
- no sandbox malicious verdict
- unsigned executable
- rare but long known prevalence
- single YARA rule match
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 0spawned processes
- 0network contacts
- 9filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Observed activity
Mutexes
9Named locks a program uses so only one copy runs; malware families often reuse them.
CTF.LBES.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500CTF.Compart.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500CTF.Asm.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500CTF.Layouts.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500CTF.TMD.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500CTF.TimListCache.FMPDefaultS-1-5-21-1482476501-1645522239-1417001333-500MUTEX.DefaultS-1-5-21-1482476501-1645522239-1417001333-500
Show all 9 entries for mutexes
MSCTF.Shared.MUTEX.EBHMSCTF.Shared.MUTEX.EOFMSCTF.Shared.MUTEX.EHC
Chapter 04
Technical details
None of the 73 antivirus engines that checked it flag it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Aug 2, 2026, 11:51 PM UTC
- SHA-256
b2b6738b6be9028d8c36ca11deca155ac0beeda219b5f4c250ac85a48d0de4bc- SHA-1
4ceab8ef2996d1358c21a4844f09bd552cc7f42d- MD5
8cb4813bfffee2ab2ca9003f4df191ac
About this file
stvoyHM.v1.10 is a Win32 EXE file of 921.6 kB.
- Type and size
- Win32 EXE · 921.6 kB
- Signer
- UnsignedNo code signature.
- First seen
- Apr 23, 2011On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
- Packer
- None detected
- Entropy
- 6.29 of 8
First scanned
Antivirus consensus
0 of 73 engines flagged this file
4 of the 77 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-237 engines0flagged
- Low-trust18 engines0flagged
View all 77 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BaiduClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FireEyeClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
Signatures and behavior heuristics
Community YARA rules matched, but all of them are generic capability, anti-debug or compiler rules that ordinary software also matches. Worth noting, not on their own cause for alarm.
- Check_OutputDebugStringA_iatgeneric
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 05
Questions & answers
Short answers to the 5 questions people ask most about this file.
Is stvoyHM.v1.10 safe?
What is stvoyHM.v1.10?
How many antivirus engines detected stvoyHM.v1.10?
What is the SHA-256 hash of stvoyHM.v1.10?
How up to date is this analysis of stvoyHM.v1.10?
Community
Member reviews and reports for this exact file hash.