The Onaylanmamış 555380 crdownload File Malware Analysis

Technical Analysis

File Name	Onaylanmamış 555380.crdownload
File Type	ZIP
Magic Bytes	`Zip archive data, at least v1.0 to extract, compression method=deflate`
SSDEEP Hash	196608:IWH4Q4NaG3OQBisjSdOtOq/jJBN5t0Vjp8Vbc9r/FRI/hXgAXbBrf6Wwf:V6NaGerHvYimbc5/IZQ2bBr/G
Scanner Version	1.0.226.174
Database Version	2025-09-27 00:00:26 UTC

⚠

Suspicious File Detected

Detected by 34 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

49%

Detection Rate

10,326,924

File Size (bytes)

34/69

Engines Detected

2025-09-27

Analysis Date

File Identification

Hash Type	Value	Action
MD5	b0c71950651d435b2c8ad5baa378cf74
SHA1	b912c7d3315403f8539cf9ea9d9d75d4bf4d0f72
SHA256	3010a7b602e0b11ec2b0ecc717c36d6d0c76b2339d0f2d5491e4a2e9e06c9bad
SHA512	1ad54e21ee4c03f4c0ab40ff5d425a3a145763a8b70944ea62a1b95b17fd8fcdefddf783f1ea4df6d969112d75a59140775c0166622d00ca4c0fc7c66d54dfca

Security Engines with Detections (34 of 69)

Lionic

Trojan.ZIP.VMProtect.4!c Malicious

Elastic

malicious (high confidence) Malicious

CTX

zip.trojan.vmprotect Malicious

CAT-QuickHeal

cld.trojan.kepavll Malicious

Skyhigh

Artemis!0C415A22227D Malicious

Malwarebytes

Malware.AI.4282305006 Malicious

Zillya

Trojan.VMProtect.Win64.23929 Malicious

Sangfor

Trojan.Win64.Agent.Vxxc Malicious

Alibaba

Trojan:Win32/VMProtect.62a0a559 Malicious

K7GW

Trojan ( 005aeb761 ) Malicious

K7AntiVirus

Trojan ( 005aeb761 ) Malicious

Symantec

PUA.Gen.2 Malicious

Cynet

Malicious (score: 99) Malicious

TrendMicro-HouseCall

TROJ_GEN.R007C0DD425 Malicious

Avast

Win64:MalwareX-gen [Misc] Malicious

F-Secure

Heuristic.HEUR/AGEN.1377394 Malicious

TrendMicro

TROJ_GEN.R007C0DD425 Malicious

SentinelOne

Static AI - Suspicious Archive Malicious

Sophos

Generic Reputation PUA (PUA) Malicious

Ikarus

PUA.VMProtect Malicious

GData

Archive.Trojan.Agent.SWEGZ5 Malicious

Varist

W64/ABApplication.SJCB-8240 Malicious

Avira

HEUR/AGEN.1377394 Malicious

Antiy-AVL

GrayWare/Win32.Puwaders Malicious

Microsoft

Trojan:Win32/Etset!rfn Malicious

Google

Detected Malicious

AhnLab-V3

Trojan/Win.Generic.R695728 Malicious

DeepInstinct

MALICIOUS Malicious

TrellixENS

Artemis!0C415A22227D Malicious

MaxSecure

Trojan.Malware.345033516.susgen Malicious

Fortinet

Riskware/Application Malicious

AVG

Win64:MalwareX-gen [Misc] Malicious

Panda

Trj/CI.A Malicious

alibabacloud

Trojan:Unknow/Kepavll.Gen Malicious

35 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

34 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

The Onaylanmamış 555380.crdownload File Analysis