File scan report
Verdict Safe
Is Medal
This executable is a validly signed Qihoo 360 component seen for eight years by over 250 submitters, and only two lesser engines flagged it with generic trojan labels.
Read the whole reasonShow less
Strong evidence · Widely seen for a long time, and nothing harmful found.
The file appears to be a legitimate Qihoo 360 component and is fine to keep if you use 360 software. Uninstall the software only if you did not intend to install it, and keep your antivirus enabled.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
2 of 70 flagged
- Flagged 2
- No detection 68
- No result 5
- Code signing QIHU 360 SOFTWARE CO. LIMITED
- Test run Completed
- First seen 9y ago
Chapter 02
Why we think so
1 point against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Only 2 of the 70 antivirus engines that checked it flagged this file, ClamAV and Jiangmin, and both used generic labels. None of the 18 major antivirus engines detected it. The file carries a valid signature from QIHU 360 SOFTWARE CO. LIMITED and has been widely seen since 2017. Its sandbox runs showed no high-risk behaviour.
The two detections come from ClamAV and Jiangmin. Both are generic trojan buckets that name no malware family, and every major antivirus engine stayed clean. The file has a valid code signature from QIHU 360 SOFTWARE CO. LIMITED. In the sandbox it wrote registry values under the company's own 360Safe update keys, which fits a genuine 360 product component. It has been in circulation since October 2017 and was submitted by 253 distinct sources. Eight sandbox runs recorded no high-risk techniques and no process injection, and none of the 13 contacted hosts we checked has a bad reputation. No public malware database or community rule lists this file.
What We Detected
2 of the 70 antivirus engines that checked it flagged the file: ClamAV and Jiangmin. Both used generic trojan labels with no named family. All 18 major antivirus engines reported it clean. The file has a valid signature from QIHU 360 SOFTWARE CO. LIMITED and has been widely seen since 2017.
Threat Behavior
The eight sandbox runs recorded only techniques common in legitimate software. The sample wrote values under the 360Safe update registry keys and created program markers named after 360. No process injection was recorded, no files were dropped, and none of the contacted hosts we inspected has a bad reputation.
What To Do Now
This appears to be a component of Qihoo 360 software. If you installed a 360 product on purpose, no action is needed. If you did not expect 360 software on your system, uninstall it through Windows Settings. Keep your antivirus enabled either way.
Where this verdict could be wrong2 caveats
- The signer has no history in our records and is not on our curated publisher list, so the signature confirms who built the file but is not backed by a track record with us.
- Qihoo 360 software is sometimes considered unwanted by users who did not choose to install it, although no engine labelled this file as adware or unwanted software.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- The file has a valid signature from QIHU 360 SOFTWARE CO. LIMITED.
- None of the 18 major antivirus engines flagged it.
- It has been widely seen since 2017, with 253 distinct submitters.
- Eight sandbox runs showed no high-risk techniques or process injection.
- No listing in public malware databases or community rule sets.
- Two engines detected the file with generic trojan labels.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 8 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 8isolated sandbox runs
- 24sandbox rule tags
- 3spawned processes
- 3network contacts
- 25filesystem & mutex artifacts
Includes the sandbox verdicts, 24 mapped techniques and every process, file, registry and network entry.
Show the technical evidenceChapter 04
Technical details
2 of the 70 antivirus engines that checked it flag it; signed by QIHU 360 SOFTWARE CO. LIMITED.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 2
The Safe verdict weighed these detections and treats them as non-decisive.
- ClamAVWin.Trojan.Generickds-10033145-0
- JiangminTrojan.Generic.dxmkl
File fingerprint
- Last analyzed
- Oct 21, 2026, 5:33 PM UTC
- SHA-256
c7ef88c39b752e1113a3011d9ad58648add4801313b5a1f49fe0d4dccdaa0fae- SHA-1
c8850d59f850e8af756ef7923f786f825bce2d31- MD5
6e10b7d97ce3a8da723c80b5c187077b
About this file
MedalWall.exe says it is 360 Medal Wall, 1.4 MB.
- Claims to be
- 360 Medal WallFrom the file's own version information, written by whoever built it.
- Original name
- MedalWall.exeMatches the shared file name.
- Type and size
- Win32 EXE · 1.4 MB
- Signer
- QIHU 360 SOFTWARE CO. LIMITEDValid code signature.
- First seen
- Oct 25, 2017On VirusTotal.
- Submitted by
- 253 distinct sources
- Packer
- None detected
- Entropy
- 6.16 of 8
First scanned
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is MedalWall.exe safe?
What is MedalWall.exe?
How many antivirus engines detected MedalWall.exe?
Is MedalWall.exe digitally signed?
What is the SHA-256 hash of MedalWall.exe?
Is it safe to run MedalWall.exe?
How up to date is this analysis of MedalWall.exe?
Community
Member reviews and reports for this exact file hash.