The app.php File Analysis

Updated 7 months ago

Checked by Malware Check

app.php

Technical Analysis

File Name	app.php
File Type	PHP
Magic Bytes	`PHP script, ASCII text, with very long lines (19425u), with CRLF line terminators`
SSDEEP Hash	12288:u5j9Huk7YWKHziwF4TrWOAyL4rtxbqx+oN:Yjj7YWKHziwCTyOAyLGtxbqx+oN
Scanner Version	1.0.216.174
Database Version	2025-05-16 22:00:24 UTC

⚠

Suspicious File Detected

Detected by 22 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

35%

Detection Rate

463,792

File Size (bytes)

22/62

Engines Detected

2025-05-16

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	827a0fde68578e9665b2d6032d67cd95
SHA1	6acce65665ddf6ebdfb6e514c161d5956e1f4b2b
SHA256	271733cef181f9591ef64131b4a2118b5a1c67f82d7164a7b7c3b5f4d83c6a06
SHA512	6441d974d1ed5641ab4602dfe123741fcf391875ac482eb9a625ebc58a184f61710f1e7b7229eac7ecb9f0d5521da8ce3d3df0a6b7c1003e16fdde1237fcd371

Security Engines with Detections (22 of 62)

CAT-QuickHeal

HTML.Trojan.46095 Malicious

Sangfor

Malware.Generic-PHP.Save.10d805bd Malicious

ESET-NOD32

PHP/Webshell.NHJ Malicious

Avast

PHP:Shell-BH [Trj] Malicious

Kaspersky

Trojan.PHP.WebShell.ic Malicious

NANO-Antivirus

Trojan.Script.Backdoor.kqqffp Malicious

Rising

Backdoor.WebShell/PHP!1.A59F (CLASSIC) Malicious

Google

Detected Malicious

F-Secure

Backdoor.BDS/WebShell.G6 Malicious

DrWeb

PHP.Shell.741 Malicious

Sophos

Troj/WebShel-EO Malicious

Ikarus

Trojan.WebShell.LPHunter Malicious

Varist

PHP/WebShell.BL Malicious

Avira

BDS/WebShell.G6 Malicious

Kingsoft

Script.Troj.php.2024617 Malicious

ZoneAlarm

Troj/WebShel-EO Malicious

Microsoft

Trojan:Script/Phonzy.A!ml Malicious

Cynet

Malicious (score: 99) Malicious

AhnLab-V3

WebShell/PHP.Generic.S1519 Malicious

huorong

Backdoor/PHP.WebShell.h Malicious

Fortinet

PHP/Webshell.NHJ!tr Malicious

AVG

PHP:Shell-BH [Trj] Malicious

40 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

22 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1