Malicious
Fresh RAR archive containing a PE flagged by six tier-1 engines as Blamon trojan.
b8615696c1e0d13106…30d469711fThe verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
Tier-1 consensus on the win32 family combined with explicit Blamon labels from Kaspersky and GData provides high-confidence malicious classification. The archive is only hours old, carries a zero reputation, and shows no signing or runtime exoneration. Low-trust detections are present but irrelevant because tier-1 engines already agree. Absence of sandbox or network data does not override the static multi-engine verdict.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
engines.tier1FamilyConsensus.strong=true (4 engines, family=win32)
topDetections[5].result='Trojan.Win32.Blamon.akhy' (Kaspersky, tier1)
file.tags=['contains-pe','rar'] and popularThreatLabel='trojan.blamon'
engines.malicious=18 with tier1Malicious=6 and onlyLowTrustFlagging=false
- Contains embedded PE inside RAR
- Strong tier-1 family consensus on Blamon
- Zero reputation and first seen today
Treat as malicious and remove immediately; the tier-1 engine agreement is decisive.
blamon corroborated by 2 sources
- VT (75 engines)blamon
- MT AI Engineblamon
18 detections across 75 engines
How often this file shows up in the wild
Barely seen in the wild and first surfaced recently. This is the footprint of targeted malware the AV industry hasn't signatured yet — extra scrutiny is warranted.
Forensic fingerprint
- File name
- 直播粉收费标准1.txt.z
- Size
- 7.72 MB
- MIME type
- application/x-compress
- Detected type
- RAR
- SHA-256
- b8615696c1e0d13106620fa76a4da06f502540bdbaca61c2183d8330d469711f
- MD5
- c186bd45a769fe89fb96928cd486034c
- SHA-1
- 9300add156415c22aaea9239b9572f815ee5d472
- First seen (VT)
- 5/18/2026, 2:34:03 PM
- Last analysis (VT)
- 5/18/2026, 2:34:03 PM
- First scan (MalwareTips)
- 5/18/2026, 2:35:05 PM
- Last scan (MalwareTips)
- 5/18/2026, 2:35:05 PM
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.