The Release_x86_x64.zip File Analysis

Updated 1 month ago

Checked by Malware Check

Release_x86_x64.zip

Technical Analysis

File Name	Release_x86_x64.zip
File Type	ZIP
Magic Bytes	`Zip archive data, at least v2.0 to extract, compression method=deflate`
SSDEEP Hash	6144:uiS+38nLXEbJPBAW+w/sEfpP/cvb03XzSkp39653sXb:uiS+3MLX8Ak/vfp3cA3uu969sr
Scanner Version	1.0.229.174
Database Version	2025-11-12 20:00:16 UTC

⚠

Suspicious File Detected

Detected by 13 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Cobalt Strike is a penetration testing framework that deploys the Beacon agent for system control. While designed for legitimate security testing, it provides command execution, keylogging, file transfer, privilege escalation, and lateral movement capabilities. The tool operates in-memory to avoid disk-based detection and supports multiple communication protocols.

19%

Detection Rate

328,186

File Size (bytes)

13/67

Engines Detected

2025-11-12

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	59a3cc2dbc8b56ada3b04f209cbbcb11
SHA1	4d2e2410ae9b6ee53c5b589d9cfdf055598d2feb
SHA256	73824042e4ee3bb77eee3f227c2e3d67aca0c271003ec9353e347966cd7d4b9b
SHA512	b980937569721269ea819d19a6752083a6860f397766604e537e6f8b06838a7bfbcc5d16ce24da5d151351a2a3198a4597e07d2a322d84a16c06249eded40f89

Security Engines with Detections (13 of 67)

Lionic

Trojan.Win32.Generic.4!c Malicious

Skyhigh

Artemis!Trojan Malicious

Rising

Trojan.CobaltStrike!8.EDF2 (CLOUD) Malicious

Sophos

Mal/Generic-S Malicious

Ikarus

Trojan.Win64.Rozena Malicious

GData

Archive.Trojan.Agent.ODDL3O Malicious

Google

Detected Malicious

Antiy-AVL

Trojan/Win64.CobaltStrike Malicious

VBA32

Downloader.MSIL.Pabin.Heur Malicious

TrellixENS

Artemis!A67471EA4ECE Malicious

MaxSecure

Trojan.Malware.8426628.susgen Malicious

Fortinet

W32/PossibleThreat Malicious

alibabacloud

Suspicious Malicious

54 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

13 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now