The defender control v2 msi File Malware Analysis

The defender_control_v2.msi File Analysis

Updated 2 months ago

Checked by Malware Check

defender_control_v2.msi

Technical Analysis

File Name	defender_control_v2.msi
File Type	Windows Installer
Magic Bytes	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Subject: Default, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {2571FC0D-111B-A901-DBE6-EADD07689EEB}, Create Time/Date: Fri Jun 13 16:52:28 2025, Number of Pages: 200, Number of Words: 2, Security: 2, Title: Microsoft Visual C++ 2015-2024 Redistributable Installer, Author: Microsoft, Name of Creating Application: Master Packager 25.6.9358, Last Saved By: Admin, Last Saved Time/Date: Bad 0x29bf2b3c68f3d8fc
SSDEEP Hash	196608:/HGbQE9d00AGD0yANlDdUHGbQE9d00AGqHGbQE9d00AGIHGbQE9d00AGsHGbQE9f:/mkEdt03NldUmkEd0mkEdOmkEdymkEd
Scanner Version	1.0.228.174
Database Version	2025-11-07 16:00:25 UTC

⚠

Suspicious File Detected

Detected by 8 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

13%

Detection Rate

11,251,712

File Size (bytes)

8/62

Engines Detected

2025-11-07

Analysis Date

File Identification

Hash Type	Value	Action
MD5	3b70838569e806384c6439d9b81340ea
SHA1	d4815e8862fb476542baaeeb6e9b95ea4404ade6
SHA256	49fa567f406302fdf7dc9f0e632b4e7c4a108c56dde76173639925e16c09e971
SHA512	ba565e3b6fc6c71f55495a44ab151dbd0d5be9d3886016762ff662d74a7361a46ae1fe36dd9fdedf2e6655d0c5bd0d36cf532ba2ddd3a023a49afeea875a494c

Security Engines with Detections (8 of 62)

Kaspersky

not-a-virus:UDS:RemoteAdmin.MSIL.ConnectWise.gen Malicious

Zillya

Trojan.Stealer.Win32.37991 Malicious

Ikarus

PUA.ConnectWise Malicious

Xcitium

ApplicUnwnt@#35vumv3hhm4sb Malicious

GData

Generic.Application.Agent.K7OCHE Malicious

VBA32

Exploit.MSIL.PrivEsc.Heur Malicious

Rising

Hacktool.ConnectWise!8.13A88 (CLOUD) Malicious

TrellixENS

Artemis!9A4395BB702E Malicious

54 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

8 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1