The sh File Malware Analysis

Technical Analysis

File Name	sh
File Type	Shell script
Magic Bytes	`Bourne-Again shell script, ASCII text executable`
SSDEEP Hash	24:udi4z2zELN4AltrM35BFRDD6n0LY83H0tfhhp5wEliodZYDYc7QW:udlyAL9tonmzfvJlBZY6W
Scanner Version	1.0.223.174
Database Version	2025-08-15 10:00:19 UTC

⚠

Suspicious File Detected

Detected by 31 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

50%

Detection Rate

1,598

File Size (bytes)

31/62

Engines Detected

2025-08-15

Analysis Date

File Identification

Hash Type	Value	Action
MD5	9b276fa82db0e121ef60aa89823d63d7
SHA1	ee9f0e5263dfab5edf635b149eea2c9a9eef3bf3
SHA256	de96a56c5508bb69c20f171a141263ebed92823eb3249dccb9db1ff350b37b31
SHA512	553baf4a3dea743c5ebe34925763be1bb40f2adab4bdfbaffafb4af94df520b13d7f5ca598ef8695f064466fad1bd23e4368f01e5530d18b860c6a176deb3d6f

Security Engines with Detections (31 of 62)

Lionic

Trojan.Script.Multiverze.a!c Malicious

CTX

shell.trojan.multiverze Malicious

CAT-QuickHeal

SHell.Adware.Trojan.49188.GC Malicious

Skyhigh

Linux/Downloader.w Malicious

ALYac

Trojan.Generic.38362378 Malicious

Symantec

Trojan.Gen.NPE Malicious

ESET-NOD32

Linux/TrojanDownloader.SH.CZF Malicious

TrendMicro-HouseCall

Trojan.Linux.MULTIVERZE.VSNW14L24 Malicious

Avast

BV:Downloader-AEH [Drp] Malicious

Kaspersky

HEUR:Trojan-Downloader.Shell.Agent.dk Malicious

BitDefender

Trojan.Generic.38362378 Malicious

NANO-Antivirus

Trojan.Script.Downloader.kuoppn Malicious

MicroWorld-eScan

Trojan.Generic.38362378 Malicious

Rising

Downloader.Agent/BASH!8.13146 (TOPIS:E0:k6p32YXyQfU) Malicious

Emsisoft

Trojan.Generic.38362378 (B) Malicious

DrWeb

Linux.DownLoader.2269 Malicious

VIPRE

Trojan.Generic.38362378 Malicious

TrendMicro

Trojan.Linux.MULTIVERZE.VSNW14L24 Malicious

Ikarus

Trojan-Downloader.Linux.Sh Malicious

GData

Trojan.Generic.38362378 Malicious

Varist

ABDownloader.EXH Malicious

Kingsoft

Script.Troj.Generic.2039595 Malicious

Arcabit

Trojan.Generic.D2495D0A Malicious

Microsoft

Trojan:Script/Multiverze Malicious

Google

Detected Malicious

Tencent

Win32.Trojan-Downloader.Agent.Jmnw Malicious

TrellixENS

Linux/Downloader.w Malicious

huorong

Trojan/Linux.CoinMiner.cp Malicious

Fortinet

BASH/SH.CNG!tr.dldr Malicious

AVG

BV:Downloader-AEH [Drp] Malicious

alibabacloud

Trojan[downloader]:Linux/Multiverze.Gen Malicious

31 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

31 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

The sh File Analysis

Technical Analysis

Suspicious File Detected

Scan Another File

File Identification

Security Engines with Detections (31 of 62)

Remember: This is Result of Online Virus Scanner

Keep Your System Protected

Leave a Comment

Gridinsoft Anti-Malware