File scan report
Verdict Suspicious
Is adaptive_ hud. asi safe? Treat it as suspicious.
Unsigned new DLL with one detection from a major antivirus engine and no sandbox or external corroboration.
Why Suspicious? 5 antivirus engines flag it; nothing else confirms it.
Limited evidence · One sign points to a problem; nothing else confirms it.
Treat the file as untrusted until sandbox results or additional detections become available; keep all security software active.
What to do now4 steps
Some signs point to a problem, but nothing confirms it is harmful. Treat it with caution.
What to do
Don't use it unless you're sure where it came from.
Check where you got it: an unexpected attachment, a link someone sent you or a re-upload is a red flag.
If you can't confirm where it came from, delete it. If you need the program, download it again from the publisher's own website.
If you already used it
Stop using it, run a full scan with your antivirus and watch for unexpected behavior or security alerts.
Not sure what to do?
Ask the MalwareTips community before you run it. If you already ran it, follow the cleanup guide.
- Ask for free help on the MalwareTips forumWindows malware removal help, answered by volunteers. (opens malwaretips.com in a new tab)
- Remove malware from WindowsStep-by-step cleanup with free tools. (opens malwaretips.com in a new tab)
Paste this report's link in your topic so helpers can see what was found.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
5 of 70 flagged
- Flagged 5
- No detection 65
- No result 5
- Code signing Unsigned
- Test run Partial
- First seen 1mo ago
Chapter 02
Why we think so
3 points against it and 2 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Five of the 70 antivirus engines that checked it flagged the file, including one major antivirus engine. The DLL is unsigned, and has no sandbox results or external-intel hits. Evidence is too thin for a definitive malicious or safe call.
A one detection from a major antivirus engine without family consensus is not enough to declare the file malicious. The complete absence of data from the test run and external corroboration prevents a clean verdict. The file's rarity and unsigned status add uncertainty. Mixed signals place the sample in the suspicious band.
What We Detected
5 of the 70 antivirus engines that checked it reported the sample malicious. Microsoft (major) labelled it Trojan:Win32/Wacatac.B!ml; the remaining detections came from one smaller and three less reliable engines. No family consensus exists among major antivirus engines.
Threat Behavior
No sandbox execution data is available. The file made no observed network connections and dropped no children. The antivirus analysis shows normal section entropy and no known packers.
What To Do Now
Do not execute the file on production systems. Keep security software enabled. Submit the sample to a sandbox service for the test run before any further use.
- No sandbox malicious verdict
- No external-intel hits
- Unsigned Win32 DLL
- rare and prevalence
- One detection from a major antivirus engine without family consensus
6 sources checked · 4 complete · 1 partial · 1 not needed or not applicable. See every source
Chapter 03
Technical details
5 of the 70 antivirus engines that checked it flag it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 partial · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 5
- Microsoft (major engine)Trojan:Win32/Wacatac.B!ml
- CrowdStrikewin/malicious_confidence_60% (D)
- CynetMalicious (score: 100)
- McAfeeDti!1C6A2CC5A49E
- RisingTrojan.Kryptik@AI.81 (RDML:rRtHIlZwb6wUVAg0MrUYzw)
File fingerprint
- Last analyzed
- Aug 28, 2026, 6:03 PM UTC
- SHA-256
1c6a2cc5a49efbaac539c4ef416f9a82de8be3c2a3b08e0b7b3360f7f846b7fe- SHA-1
196a63a17435fea4665081fe66db3628d85823af- MD5
5c0fa660038c41a7ffe5d296b5767f96
About this file
adaptive_hud.asi is a Win32 DLL file of 810.0 kB.
- Type and size
- Win32 DLL · 810.0 kB
- Signer
- UnsignedNo code signature.
- First seen
- Aug 28, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
- Packer
- None detected
- Entropy
- 6.41 of 8
First scanned
Antivirus consensus
5 of 70 engines flagged this file
5 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-117 engines1flagged
- Tier-236 engines1flagged
- Low-trust17 engines3flagged
View all 75 engine results
- CrowdStrikeMalicious: win/malicious_confidence_60% (D)
- CynetMalicious: Malicious (score: 100)
- McAfeeDMalicious: ti!1C6A2CC5A49E
- MicrosoftMalicious: Trojan:Win32/Wacatac.B!ml
- RisingMalicious: Trojan.Kryptik@AI.81 (RDML:rRtHIlZwb6wUVAg0MrUYzw)
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CTXClean
- CylanceClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusNo result
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineClean
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is adaptive_hud.asi safe, or is it malware?
What is adaptive_hud.asi?
How many antivirus engines detected adaptive_hud.asi?
I already downloaded and used adaptive_hud.asi — what should I do?
What is the SHA-256 hash of adaptive_hud.asi?
How up to date is this analysis of adaptive_hud.asi?
Community
Member reviews and reports for this exact file hash.