The wsomini php File Malware Analysis

Technical Analysis

File Name	wsomini.php
File Type	PHP
Magic Bytes	`PHP script text`
SSDEEP Hash	768:3tGescJF98nF+kc1LSPa764gaeuC3IHi0zJ+Bl6:3tGPcf98nF+kc1LkePL964
Scanner Version	1.0.216.174
Database Version	2025-05-16 22:00:24 UTC

⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

13%

Detection Rate

25,910

File Size (bytes)

8/61

Engines Detected

2025-05-16

Analysis Date

File Identification

Hash Type	Value	Action
MD5	eead2f5f24927afeba5c5eebb632639c
SHA1	a86a12c19a8ceb864e1649887e737b3fe28b558a
SHA256	c6533fc0fcb09daa457c4e929905af0840a24627dad8a9b5429d138c19daafc7
SHA512	bbc54b8f59db3ae63b5a7c4695a22341ab09b832c8a853470614f4734b78e96daff2e4d1711a15e869a108cb06100a1e539c4c0f2e3d4c1790008e809f1b5d8b

Security Engines with Detections (8 of 61)

Lionic

Trojan.PHP.WebShell.m!c Malicious

Sangfor

Backdoor.Generic-PHP.Save.cfef9bd1 Malicious

ESET-NOD32

PHP/Agent.NKA Malicious

Kaspersky

HEUR:Backdoor.PHP.WebShell.gen Malicious

Sophos

Troj/WebShel-DA Malicious

Ikarus

Trojan.PHP.Agent Malicious

Google

Detected Malicious

Tencent

Heur:Bk.Webshell.LS_Gencirc.7200222.0 Malicious

53 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

8 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1

The wsomini.php File Analysis