File scan report
Verdict Suspicious
Is T4est safe? Treat it as suspicious.
This Linux executable has one machine-learning detection from Microsoft out of 75 engines and no other hostile evidence, but it is rare and nothing has observed its behaviour.
Read the whole reasonShow less
Why Suspicious? One antivirus engine (Microsoft) flags it; nothing else confirms it.
Limited evidence
If it came from a link, an attachment or a stranger, delete it.
What to do now5 steps
Some signs point to a problem, but nothing confirms it is harmful. Treat it with caution.
What to do
Don't open it unless you're sure where it came from.
Check where you got it: an unexpected attachment, a link someone sent you or a re-upload is a red flag.
If you can't confirm where it came from, delete it. If you need the program, download it again from the publisher's own website.
It is less than a day old. If you're unsure, scan it again in a few days; antivirus engines often catch up on new files.
If you already opened it
Stop using it, run a full scan with your antivirus and watch for unexpected behavior or security alerts.
Not sure what to do?
Ask the MalwareTips community before you run it. If you already ran it, follow the cleanup guide.
- Ask for free help on the MalwareTips forumWindows malware removal help, answered by volunteers. (opens malwaretips.com in a new tab)
- Remove malware from WindowsStep-by-step cleanup with free tools. (opens malwaretips.com in a new tab)
Paste this report's link in your topic so helpers can see what was found.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
1 of 63 flagged
- Flagged 1
- No detection 62
- No result 12
- Code signing Not applicable
- Test run Not run
- First seen Today
Chapter 02
Why we think so
3 points against it and 2 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Only Microsoft flagged this 64-bit Linux executable, with a generic machine-learning label. 17 other major antivirus engines did not flag it. It was first seen on Oct 25, 2026 from a single source. We have no sandbox run, no inspection of its contents and no reference-database entry, so there is not enough evidence for a confident call.
One of the 63 antivirus engines that checked it flagged the file: Microsoft, with a generic machine-learning trojan label that names no malware family. No other major or mid-tier engine flagged it, which points toward a possible false positive. However, the file is rare and new, with a single submitter, and is not a known reference file. No sandbox run or static inspection of its contents is available, so its behaviour is unobserved. Without a benign anchor or any corroborating hostile evidence, the evidence is too thin to call it either way.
What We Detected
This is a 64-bit Linux executable of about 8.6 MB, first seen on Oct 25, 2026. One of the 63 antivirus engines that checked it flagged it: Microsoft reported a generic machine-learning trojan label. None of the other engines, including 17 other major antivirus engines, flagged it. The file has no entries in malware-sharing databases, community rule sets or known-software references.
Threat Behavior
No observation from the test run is available, and nobody has inspected the file's contents. Its network activity and actions are therefore unknown. The lone detection names no malware family and is the kind of automated label that sometimes misfires on unusual binaries.
What To Do Now
If you did not build this file yourself or get it from a trusted source, do not run it. Rescan it later as more engines and analyses report, or run it only in an isolated test system.
Where this verdict could be wrong1 caveat
- The single Microsoft detection is a machine-learning label in a generic bucket, and no other engine agrees with it. That shape is often a false positive.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 74 of the 63 antivirus engines that checked it did not flag it, including 17 other major antivirus engines
- No listing in malware-sharing databases or community malware rules
- Microsoft flagged it with a generic machine-learning trojan label
- Rare file with a single submitter, first seen on Oct 25, 2026
- No sandbox run or inspection of its contents is available
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
1 of the 63 antivirus engines that checked it flags it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
- Microsoft (major engine)Trojan:Script/Wacatac.C!ml
File fingerprint
- Last analyzed
- Oct 25, 2026, 10:08 PM UTC
- SHA-256
ae36791fd3100a39b1a3402334850a4edece25211a604a80775d9f56cd6c4538- SHA-1
ed0f0ad778cc2612d923a460c0954a6ad88a0ffa- MD5
2d0a189152a3c956c3a9d80cec430da6
About this file
T4est is an ELF file of 8.6 MB.
- Type and size
- ELF · 8.6 MB
- Signer
- Not applicable
- First seen
- Oct 25, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
1 of 63 engines flagged this file
12 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines1flagged
- Tier-234 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- MicrosoftMalicious: Trojan:Script/Wacatac.C!ml
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXNo result
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Barely seen in the wild and first surfaced recently. 1 antivirus detection make that low prevalence materially relevant, but rarity alone is not proof of malware.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is T4est safe, or is it malware?
What is T4est?
How many antivirus engines detected T4est?
What should I do if I already opened T4est?
What is the SHA-256 hash of T4est?
How up to date is this analysis of T4est?
Community
Member reviews and reports for this exact file hash.