--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

VT-f94f2b5381351541048644480c77790b medium

📛 Threat Title

File hash (MD5): f94f2b5381351541048644480c77790b

Category: malware-hash Published: Source updated: First seen: Last updated:

Description

Hash IOC ingested from threat-intel feed 'Abuse.ch'. See VirusTotal for vendor verdicts, file metadata, sandbox behaviour, and relationships (contacted IPs / domains / URLs, dropped files, etc.). Feed description: MD5 hashes: Recent additions

Remediations (10)

  • File Hash Checker | CheckTown
    web:check.town

    Free file hash checker. Upload a file and compute MD5 , SHA-1, SHA-256, and SHA-512 checksums client-side.

  • MD5 File Checksum - Online Tools
    web:emn178.github.io

    This MD5 online tool helps you calculate the hash of a file from local or URL using MD5 without uploading the file . It also supports HMAC.

  • MD5 Hash Checker - Verify Text & Files Instantly in Your Browser
    web:flipperfile.com

    Free MD5 hash checker that works entirely in your browser. Generate and compare MD5 hashes for text or files instantly, with no uploads or tracking.

  • File Hash Checker - Verify File MD5/SHA Integrity Online
    web:freetoolkit.co

    Free File Hash Checker online — instantly verify file integrity directly in your browser. Calculate MD5 , SHA-1, SHA-256, and SHA-512 checksums without uploading your file . 100% private.

  • File Hash Checker - Malicious Hash Lookup (MD5/SHA-256)
    web:inventivehq.com

    File Hash Checker & Malware Hash Lookup Drag in a file to hash it locally (SHA-256/SHA-1, nothing uploaded), or paste MD5 /SHA-1/SHA-256 hashes — single or in bulk — and check them against known malware with VirusTotal & MalwareBazaar deep-links.

  • MD5 Hash Generator - Fast & Free Online MD5 Calculator - MiniWebtool
    web:miniwebtool.com

    MD5 Hash Generator - Generate MD5 hash from text or files instantly. Supports multiple output formats including hex and Base64. Verify hashes and check file integrity online.

  • How Do I Get MD5 Hash of a File on Windows? - sslinsights.com
    web:sslinsights.com

    Learn how to get MD5 hash of a file in Windows using Command Prompt and PowerShell. Quick and easy methods for file verification.

  • Online File Hash Checker - MD5, SHA1, SHA256, SHA512, CRC32
    web:www.freecodeformat.com

    Verify file integrity online. Calculate MD5 , SHA1, SHA256, SHA512, SHA3, RIPEMD-160, and CRC32 hashes for any file . Fast, secure, and supports multiple files .

  • File Hash Checker - Verify File Integrity with MD5, SHA-1, SHA-256, and ...
    web:www.getzenquery.com

    Verify file integrity instantly with our free online File Hash Checker. Upload any file to compute MD5 , SHA-1, SHA-256, and SHA-512 hashes—then compare with original or expected checksums. Perfect for ensuring downloaded files are intact, validating software authenticity, or detecting corruption. All processing happens locally in your browser for privacy.

  • Hash & Validate - Online MD5, SHA1, SHA256 and CRC32 file hasher - Toolsley
    web:www.toolsley.com

    Calculate the hash for any file online. Generate MD5 , SHA1, SHA256 or CRC32 instantly in your browser using JavaScript. Make share-able links to validate files . No need to install anything, just drag & drop.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

hash_md5 f94f2b5381351541048644480c77790b VT 19 / 75 1 feed

IOC database

Type
hash_md5
Value
f94f2b5381351541048644480c77790b
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Imported from threat-intel feed: Abuse.ch

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 1 threat-intel feed vendor: Abuse.ch. Open in Threat Hunt →

Flagged by 19 of 75 VirusTotal vendors

VendorVerdictDetection
ALYac malicious JS:Trojan.Cryxos.16224
Arcabit malicious JS:Trojan.Cryxos.D3F60
Avira malicious TR/Malware
BitDefender malicious JS:Trojan.Cryxos.16224
CTX malicious javascript.trojan.cryxos
Emsisoft malicious JS:Trojan.Cryxos.16224 (B)
ESET-NOD32 malicious JS/Agent.UIN trojan
F-Secure malicious Trojan.TR/Malware
Fortinet malicious JS/Agent.UIN!tr
GData malicious JS:Trojan.Cryxos.16224
Google malicious Detected
huorong malicious Trojan/JS.Runner.v
Kaspersky malicious HEUR:Trojan.Script.Generic
McAfeeD malicious Trojan:Script/Remcos.NEC
MicroWorld-eScan malicious JS:Trojan.Cryxos.16224
Rising malicious Trojan.Obfus/JS!1.13E19 (CLASSIC)
Symantec malicious Scr.Malcode!gen
Varist malicious JS/Agent.DZM
VIPRE malicious JS:Trojan.Cryxos.16224

Details From VirusTotal

Basic Properties
MD5f94f2b5381351541048644480c77790b
SHA-1b0cec3c5fd422806978e47dab6cbcdff9b0e9a86
SHA-25666db625b80c4fd0725ac10e8d59fccf81b747dfa330041196fab74261a8aeb66
VHash6c96a08e9c64f2dbf2df2c06040f99b2
SSDEEP768:gWc2BLpoh8ekdvbb44irfSvPO04pt932FiYWAeoxxTwpfpuWirOxYTmmc296nX6a:dBc
TLSHT189E50EF7E9E9DF294C891393CDEA2FC65CD6D9AE59B29069B80CC7C13D870291432C61
File typeJavaScript
File type tagjavascript
File extensionjs
MagicUnicode text, UTF-8 text, with CRLF line terminators
File size3.1 MB
History
First seen on VirusTotal2026-06-05 08:40 UTC
Last submission2026-06-05 08:40 UTC
Last analysis2026-06-05 08:40 UTC
Last modified on VirusTotal2026-06-05 08:46 UTC
Known Names
  • PO-2606-01.js

References (1)

  • VirusTotal report

    Vendor verdicts, file metadata, sandbox behaviour, and relationships (contacted IPs / domains / URLs, execution parents, dropped files).

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.