Index

expo-sqlite 16.0.9 Provides access to a database using SQLite (https://www.sqlite.org/). The database is persisted across restarts of your app. Sep 14 npm

c7309b34d63d03b80b141a3ed389954300d0179cde2f3c51f9fd1e8e7896e7e9 Md₃(BiSi₂)

16% Legitimate Expo SQLite package

Trojan-Downloader.Win32.Wren.i Sep 12

d87e6983b6d318e0aa4b1538bfb9642204dc9c1be665a3b871dbcaac0e66c083 Md₃(BiSi₂)

77% Known Trojan Downloader

OOMOL.OOMOLStudio 25.20 Sep 12 windows

49c5c37baec0d9bdf670a851f69da45e654234c629e7ea56519287a8b2865611 Md₃(BiSi₂)

Creality.CrealityPrint Aug 29 windows

d33fe413b48cb5bc16a2a05e57f2be55632c0fe4ebef1c8ec6c8859b348c4a1c Md₃(BiSi₂)

JinweiZhiguang.MasterGo Aug 22 windows

5a9db582562ad3168577c98fa47c93a0528dc7087b47d22987b69dfb560e499e Md₃(BiSi₂)

46% Signed legitimate installer

DevExpress.Win.Navigation.de 26.1.4-pre-26179 Target Platform/Framework: Desktop DevExpress Product Libraries Used: WinForms UI components (https://www.devexpress.com/winforms) Availabl… 24,028 installs Jul 2 dotnet

e1eb5e75c4a09b246b1c0a90d014064b917aa03d87c1ef2e4319f1d53b857ba8 Md₃(BiSi₂)

41% Legitimate signed library package

libvisio 0.1.1 Jun 27

6f07bc5f9fdcc4558cea9b9b87946e0066120584c9ff7194a523c8adf54aef33 Md₃(BiSi₂)

37% Legitimate library with standard signatures

etree.cpython-310-darwin.so Jun 27

a78cfacf9bf4e0ef7892a9195fdb82272950f93045c47b0ff0a89ed9977e93ad Md₃(BiSi₂)

_decimal.cpython-39-darwin.so Jun 27

67b5a29fcede3a7343e7e1c4008073e1265ef32f61b37104c255b8090a186570 Md₃(BiSi₂)

MsTeamsVdi Jun 27

261d487d0244556e7cd434c1632485907177001ad8effbfa92f68580baa7d546 Md₃(BiSi₂)

gstcontroller 1.0 Jun 27

1c3ef75a01a05dd88e539f7ee634aaedd8ed461484b3e0a844ac08ddd2068d0a Md₃(BiSi₂)

Xamarin.Google.MLKit.TextRecognition.Korean 116.0.1.8 .NET for Android and MAUI bindings for the Android Java library 'com.google.mlkit:text-recognition-korean'. 8,589 installs Jun 27 dotnet

2cf49aeef512cb76711d789c0cf953f51b7c59a929266f9a925dd5948ed3146c Md₃(BiSi₂)

72% Legitimate NuGet package

Xamarin.Google.MLKit.TextRecognition.Chinese 116.0.1.8 .NET for Android and MAUI bindings for the Android Java library 'com.google.mlkit:text-recognition-chinese'. 8,906 installs Jun 27 dotnet

7167fdbbaf3fc38def5f119885bbf807427a4355b5c6f474ae8d5d6cd7277e8c Md₃(BiSi₂)

71% Legitimate Microsoft signed library

Xamarin.Google.MLKit.TextRecognition 116.0.1.8 .NET for Android and MAUI bindings for the Android Java library 'com.google.mlkit:text-recognition'. 101,453 installs Jun 27 dotnet

3ce3a6c04714315ab02ddf1d1af19e23a3d70ee893b2a731aeb48405a2865bd5 Md₃(BiSi₂)

82% Legitimate NuGet package

Xamarin.Google.MLKit.TextRecognition.Japanese 116.0.1.8 .NET for Android and MAUI bindings for the Android Java library 'com.google.mlkit:text-recognition-japanese'. 9,016 installs Jun 27 dotnet

550bfcb0c54a7e26305533f75b6cb3030f6b67157af6789cc701a32ba98a2620 Md₃(BiSi₂)

71% Legitimate Microsoft signed library

Xamarin.Google.MLKit.TextRecognition.Devanagari 116.0.1.8 .NET for Android and MAUI bindings for the Android Java library 'com.google.mlkit:text-recognition-devanagari'. 8,293 installs Jun 27 dotnet

b9351914560341b4f5ce213ff7061a559880a8eb7ee304cd50d0c6a6fca43e37 Md₃(BiSi₂)

69% Legitimate NuGet package

7fb232f70717bc5086b1c0c08d3d8c460da66d195150629d995d905aaeff91ef.exe May 18

7fb232f70717bc5086b1c0c08d3d8c460da66d195150629d995d905aaeff91ef Md₃(BiSi₂)

44b276e1433d66c3fd7781cb444c171c82860a60b84e293aab2d7f869f4e3945.macho May 16

44b276e1433d66c3fd7781cb444c171c82860a60b84e293aab2d7f869f4e3945 Md₃(BiSi₂)

7db604bd255978f51ad2143f335451744c4e1534469b31f65a0eb55a108db157.exe May 13

7db604bd255978f51ad2143f335451744c4e1534469b31f65a0eb55a108db157 Md₃(BiSi₂)

9b511e0198dec0c5ad53e512c13a88408effb455a8c1b857ee63436408f8e24a.exe May 13

9b511e0198dec0c5ad53e512c13a88408effb455a8c1b857ee63436408f8e24a Md₃(BiSi₂)

59% Signed Tencent downloader

62526ae0e40fc3c752381055d806bab7437a6aeae21631d81eb75b0a252b2ffc.exe May 13

62526ae0e40fc3c752381055d806bab7437a6aeae21631d81eb75b0a252b2ffc Md₃(BiSi₂)

92% Embedded PE in signed binary

b7f82a61221f1ec4dc8d84b7800e3fa5228392ebd23908b147d74ce3f79d350e.exe May 13

b7f82a61221f1ec4dc8d84b7800e3fa5228392ebd23908b147d74ce3f79d350e Md₃(BiSi₂)

59% Signed Tencent downloader

9d8006601b08700461e3c25fce0cfeca14f48a4d766a08679c5939d44340af32.exe May 13

9d8006601b08700461e3c25fce0cfeca14f48a4d766a08679c5939d44340af32 Md₃(BiSi₂)

VirusShare_a7821ba6b70a557d56bfb2a55e6c4914 May 12

071dab66dcd51f028048502561fcc5dbb8e5168ea3cae18c2c232e82ef176d63 Md₃(BiSi₂)

22% Signed Microsoft Office binary

VirusShare_3a05c720d7c67dd4469095a58ec1e341 May 12

8e969238ef5c6aaad2ab629c82e10fe0dc55e6d53bda3dcf38a4a8c3b4539014 Md₃(BiSi₂)

84% Embedded PE in writable section

VirusShare_c83158128fd146f2d1c935a8be0f8457 May 12

1ef62b0288b22973f691e27fbae78940f042b916796c18cbf56225bb08a9502c Md₃(BiSi₂)

63% Embedded PE binaries in Java

VirusShare_f8929446c5c9e095ce0020959f81b0e9 May 12

58669387e0d240e6bbae675258163d458700166ca623564134ceeed7dbf8d2fd Md₃(BiSi₂)

24% Signed Microsoft Office binary

VirusShare_f0bb92647330739ec25f96eae9117e30 May 12

e128d5cf772714ffc13eb7c55cc16e968eb64df2bbedfc07f1ad213f24230865 Md₃(BiSi₂)

VirusShare_50869c1cd2d11531e245eb241bbb4e87 May 12

ecea337477d1bb710e6cb5bd05195f4fd076fd95a7eed8fd1c3c35af16f96df2 Md₃(BiSi₂)

72% Embedded PE in signed Java

VirusShare_8fb49afa296897d2e7a531d0a9035ef3 May 12

a8e47ba21700dd2bf6ed4677b753632d09dd0fe8bb4e36a94f664f251c03ef1b Md₃(BiSi₂)

VirusShare_a020c9b73424cdd584d43b12a1e4a650 May 12

35c9bdab1e40b9e52aa103997b555b72e4b80de30c7b470aecc0e0ca499e3cd7 Md₃(BiSi₂)

VirusShare_d78c42c3d2bd323482b3cc4040e3adc0 May 12

d3fe0260bbedb30fd268978516d55846825447b965c704f3f4e0a115e5cd48cd Md₃(BiSi₂)

32% Legitimate Adobe Reader component

VirusShare_ee57eb31c8fd13d7ccf474ed7d5fa27b May 12

ebed38a84cc9c8bf68605e2f378dc1cb0426c54545f84de52c7bd6fe3af1dc21 Md₃(BiSi₂)

15% Legitimate Mozilla crash reporter

VirusShare_d879f4b4becb9aa8473368ff85ab5030 May 12

d55f3b79e0d7ee0a87bc1993e27e74834b39a822a02ed43f358daa6d353dc245 Md₃(BiSi₂)

VirusShare_00eab90f662200d58b9f1d834ea67632 May 12

38557cd33ff222daac1d2614dbd17d0bf76bb0fdfda5752e8636888b8a64be8d Md₃(BiSi₂)

VirusShare_07a3914b270fa08a69937e2963b8f9b5 May 12

cbe01c49b17ec9d0ef003913710d3fcf9686173dbc5c4732b7ac6e8172ca930e Md₃(BiSi₂)

22% Signed Adobe Reader component

VirusShare_4894145519b79bcc154956966055121a May 12

4a16d602c5b3a1d8114518d2d47a3401a1cc26a6317acc1b31c795881602acf6 Md₃(BiSi₂)

VirusShare_6689924667d18a0db04e595fa6714f71 May 12

51b3454d0c4f3b15c9a09e772312aa5e4f6ceaf99e5ce14b7a0c565021a157b3 Md₃(BiSi₂)

VirusShare_72338eab9a0dbf52b5ad326230319653 May 12

a1ae31f31ee2dac8052d5fdffa71c432fa51c9da25a02e6402c8013fa90fb522 Md₃(BiSi₂)

VirusShare_0f05dc1236a6279beb7c3623c87bd53f May 12

3c18633ad9fe8785f1e2f67c9b16bf9cf7755bd2991e0a45860be284f4d5c51c Md₃(BiSi₂)

28% Legitimate Microsoft OneDrive binary

VirusShare_13e5ef0b833f0570a56f204a7b3f530f May 12

05e4e6fd9099b5de1584db87026307af82408638b99d5c452b348b203bfe7ca4 Md₃(BiSi₂)

91% Embedded PE in non-PE container

VirusShare_48ca12a3618a893563dc536ef4a097dd May 12

86adba648ef70ad21d27ba4fcdfdd68a1bc07dbf8d810e87bc7200e15353d5ab Md₃(BiSi₂)

33% Legitimate Microsoft signed binary

VirusShare_d54ee17899fb44660fb975ebae68ec39 May 12

5ee9fedceacfcd9ca6393eab6a49346f607dc2bcffe028f67f0eeb2e11fd959b Md₃(BiSi₂)

27% Signed Adobe utility with embedded Microsoft components

VirusShare_d1751b961fa78ce49758323d48267796 May 12

5144c85782fcdacedf0e103e569c04bb31db1f16977978e8ed5f26407fb8a57e Md₃(BiSi₂)

43% Legitimate Oracle Java launcher

VirusShare_db72dece65d75bcc9e718a0997229d0b May 12

789bffa3f822d4550ed5ee06a46a92b7c59ada11c26237352551ac1621a025a1 Md₃(BiSi₂)

VirusShare_034a1769f390d5aefd7f536729be4684 May 12

57cbe9b5d3b8aba6aff06d90709ba6f8d390d77cb6da2b7a8748123ea5ca2069 Md₃(BiSi₂)

37% Signed Microsoft Office binary

VirusShare_93aba9bcbcc6cbf17b25544845cde704 May 12

959c6b9cf1065d7d91f5526765d7927e1c0439de6ce4c4ab3a0ad65e11566a2d Md₃(BiSi₂)

VirusShare_44d2f783d5830a1257d15704bd87d27c May 12

b7cceaf04b09b116ce00b8a2c5c61fa645887a165aced46efb062c2ec642042c Md₃(BiSi₂)

11% Signed Microsoft Office component

VirusShare_304ddab011fc7705d223347d27916399 May 12

f2f9cbd5f37cad7386b6489c6edf12807894f5353ef8d6535d7b36e286340b01 Md₃(BiSi₂)

2026-04-24_bdc5c7d078106aca486f8c33575cf0b3_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_remcos_rhadamanthys_stop_vidar May 6 vxunderground-inthewild

c851033c58d2347be3762b4d898b73e39369806fa3be8dfd06a66fc0e9dfc875 Md₃(BiSi₂)

70% Multi-malware sample with embedded payloads

2026-04-24_29ec33cc6aedf32178b7ee3629fe3abf_amadey_elex_luca-stealer_lynx_njrat May 6 vxunderground-inthewild

ac696f36b0624d8bb304f2c97e63da00f8540723f98681d211495085a035c008 Md₃(BiSi₂)

2026-04-02_97a59badf35c8481f0abe7b6ac6e9cad_amadey_darkgate_fabookie_rhadamanthys_smoke-loader_stop_vidar May 6 vxunderground-inthewild

6bdeb2252b9bb0ebe149e11309bfb2299a312dbd070d39a423979f6d92791d01 Md₃(BiSi₂)

51% Multi-malware loader with embedded payloads

2026-04-03_98332f977d5fc85e7827897202335225_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_redline-stealer_rhadamanthys_smoke-loader_stealc_stop May 6 vxunderground-inthewild

7f18c5132dd1714c6b7c1a213b98c164b8f7cc79c535222f503ea38661266238 Md₃(BiSi₂)

2026-04-02_d74045d645bd7e4902190a790dfd0351_amadey_darkgate_fabookie_glassworm_hawkeye_smoke-loader_stop May 6 vxunderground-inthewild

b9dbd499658da55be3056c988909a9fde60ed24154e339809d42b75bbd8f6e08 Md₃(BiSi₂)

2026-04-02_ab02382098cbbc98ef4d5f1069cdda21_akira_amadey_cloudeye May 6 vxunderground-inthewild

98c26e16e8772fa0cd40c72c3f1a6b14ac17a6add4050904e96a698063682ffa Md₃(BiSi₂)

2026-04-02_09256a75f17af9e3e48022432ec1a88f_akira_darkgate_elex_hijackloader_remcos_rhadamanthys May 6 vxunderground-inthewild

8a3f98c2f411a5b7d886bde1d07319b5015b63f5dfeec333bd3e0b9e80cb4036 Md₃(BiSi₂)

2026-04-22_6cbfafac850b0c5fffdc96f8a9eef24c_akira_elex_rhadamanthys_vidar May 6 vxunderground-inthewild

7c2578d0e11a9a6d15a006a681d99b8f569bdd77fadcd452553930ea62134ca7 Md₃(BiSi₂)

2026-04-26_037855680ba87a7edbfb93ec98e8952f_amadey_mespinoza May 6 vxunderground-inthewild

5496abff82d59399b32fe462259805054ff3bdda288fde4608d33c3568ff53e4 Md₃(BiSi₂)

49% Embedded PE in signed binary

2026-04-25_be263378c177c3a75bcd655f90c99de7_amadey_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar May 6 vxunderground-inthewild

6d17d70277ba7c67f46bcedddd043d499293c1ad5e6701a4c584c49f4a47e57b Md₃(BiSi₂)

69% Stolen Adobe cert, embedded malware

2026-04-26_174df7af4c654f712e9fa6832901c906_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_rhadamanthys_smoke-loader_stop May 6 vxunderground-inthewild

a99a8d854a1a3b1d368a776585966985faea1651f36dc0b0c24f09512628ac7b Md₃(BiSi₂)

64% Embedded PE in signed binary

11316 May 1 pe-machine-learning-dataset

22701e7a03b593794d751673b1fe5150a02beed268d4ab6856aca4e98af874b3 Md₃(BiSi₂)

QtPrintSupport Apr 24 MalwareBazaar

f1f565f28d1f425d023780d6c57f0e775838e7990d55b81ebbd7cb04fa93e655 Md₃(BiSi₂)

2026-04-09_da252921c2778c293f44613a482e95fc_amadey_darkgate_elex_mespinoza_rhadamanthys_smoke-loader_stop Apr 24 vxunderground-inthewild

71b4050acb6575501e01929975e478c3717e31d7dab8ddd3c784645262acaf10 Md₃(BiSi₂)

67% Multiple known malware families

2026-04-09_19e0df688b283ccc332d6a8d77adb7a1_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_mespinoza_smoke-loader_vidar_wannacry Apr 24 vxunderground-inthewild

55d42ea457b30ce448fc25222a34271b2c8fc4a95f9d55358fc8533051f388ff Md₃(BiSi₂)

57% Embedded PE in signed binary

2026-04-08_16b044f86fd4aa43ba5352eaa2f7b3ac_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_satacom_stealc_stop_vidar Apr 24 vxunderground-inthewild

c443fb211b6f07e0f6d61e1d473f1e75f7bf462039584e334ae853c8e1554b78 Md₃(BiSi₂)

57% Multi-malware family sample

2026-04-09_d2998203c933f7d9a48047c9fbeb1d24_elex_glassworm_mespinoza Apr 24 vxunderground-inthewild

ec5d4523a84a43bf26b912d945e10caeccbde76ff77555249e31e9dc1fb68e12 Md₃(BiSi₂)

38% Signed Microsoft Office component

2026-02-08_1a0ca75ad7f9bdf2a8c2298bb7f9721e_akira_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_satacom_vidar Apr 24 _unknown

714a3b708a1eb1cd0541f41e368df8fe38dcbc4f86272309666f7017a62d199d Md₃(BiSi₂)

93% Named malware, PE anomalies

2026-03-15_19eecf06a966b8502a42fd01594e1afb_amadey_bkransomware_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_karagany_maze_njrat_rhadamanthys_smoke-loader_vidar Apr 24 _unknown

3142549a8e494cb1edf09cc5c34427e307975e5c7b449ca246eeeb7be98f09bf Md₃(BiSi₂)

61% Ransomware family filename

2026-03-19_bfd13ba98fa846c9d8a71c48146bbf5e_amadey_cobalt-strike_darkgate_hijackloader_icedid_njrat_satacom_smoke-loader_stop_vidar_wannacry Apr 24 _unknown

57669bec8d0848392f4855ff013ae102e3c7a77885a734652aabb20c3ea54c90 Md₃(BiSi₂)

61% Multiple embedded signed PE payloads

2026-03-15_fd06821722619ecc948526e7a6ca7091_amadey_bkransomware_cloudeye_darkgate_elex_glassworm_hawkeye_karagany_luca-stealer_maze_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar Apr 24 _unknown

528703671293f7862369bef51e6d8e896eb7e960b0e8d6c23ec87ed56a2ddadd Md₃(BiSi₂)

51% Ransomware family in filename