Safe
Windows shortcut file with no detections across 61 engines including all tier-1 vendors; no malicious behaviour or network indicators observed.
21136db5ff8dd7ea2d…38ac8362c9The verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
The file is a Windows shortcut with no detections across a broad engine network. Tier-1 vendors (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Fortinet, Avast, AVG, Avira, DrWeb, Emsisoft, F-Secure, GData) all report it clean or undetected. No behavioural sandbox data, dropped children, or malicious host contacts are present. External intelligence sources (CIRCL, MalwareBazaar, YARAify) returned no hits. The file's rare-new prevalence (1 submission) limits reputation data, but the absence of any malicious signal across 61 reporting engines, especially tier-1 vendors, indicates the file is not known malware.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
engines.tier1Malicious=0; tier1ReportedClean=15 (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Fortinet, Avast, AVG, Avira, DrWeb, Emsisoft, F-Secure, GData silent)
engines.malicious=0, suspicious=0 across 61 reporting engines — no detections
prevalence.classification='rare_new' (1 submission, 1 source) — insufficient data for reputation
signing.verified=false, unsigned file with no signer history
behaviour=null, droppedChildren=null, contactedHosts=null, externalIntel all negative — no malicious indicators
- All 15 tier-1 antivirus engines report clean or undetected
- Zero malicious detections across 61 reporting engines
- No sandbox malicious verdicts or dropped children
- No contacted malicious hosts or external intel hits
- No adversarial filename or signer injection patterns
The file is safe to use based on the absence of detections across leading antivirus vendors and no observed malicious behaviour. If you downloaded it from a trusted source, proceed normally.
0 detections across 75 engines
How often this file shows up in the wild
Barely seen in the wild and first surfaced recently. This is the footprint of targeted malware the AV industry hasn't signatured yet — extra scrutiny is warranted.
Forensic fingerprint
- File name
- Madium.lnk
- Size
- 1.9 KB
- MIME type
- application/octet-stream
- Detected type
- Windows shortcut
- SHA-256
- 21136db5ff8dd7ea2dcc341ac5a99304200d9de7def67677fa1f1438ac8362c9
- MD5
- f494941f31b06663685414a7c90e721c
- SHA-1
- eb9b3515c3671fd0670c27572469888d1a1e52a2
- First seen (VT)
- 6/26/2026, 12:02:23 PM
- Last analysis (VT)
- 6/26/2026, 12:02:23 PM
- First scan (MalwareTips)
- 6/26/2026, 12:03:38 PM
- Last scan (MalwareTips)
- 6/26/2026, 12:05:59 PM
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.