Safe
Unsigned ZIP archive with zero engine detections and medium prevalence shows no malicious indicators.
4d2d50e2362fc5771e…31185c2050The reasoning behind this verdict
The MT AI Engine weighs every signal from this scan — antivirus detections, sandbox behaviour, code signing, prevalence and historical matches — to reach a single, evidence-based verdict.
Zero malicious detections across 73 engines, including 16 tier-1 engines, combined with medium prevalence and no behavioural data, supports a clean classification. The absence of signing, prior similar-hash matches, and external-intel hits does not raise suspicion given the complete lack of positive malicious signals. Filename analysis flags only a portable archive with no security or research-tool mimicry.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
engines: 0 malicious (63 undetected) with tier1Malicious=0
prevalence.classification=medium (2 submitters, 2 submissions)
filenameAnalysis.looksLikePortable=true
signing.signed=false with no signerStats history
externalIntel.yaraify.ruleCount=0
- Zero malicious engine detections
- Medium prevalence with consistent clean results
- No adversarial filename or metadata flags
Treat as safe for normal use; verify extracted files individually if they contain executables.
What to do now
This file looks safe based on everything we checked.
This file is safe to use.
Good habit: only download files from the official website or an app store.
Keep your antivirus and Windows updates switched on so you stay protected.
0 detections across 73 engines
How widely this file has been seen
Moderate prevalence — neither rare nor common. No strong prior applies.
Forensic fingerprint
- File name
- FS25_Antonov_AN2_YR.zip
- Size
- 59.93 MB
- MIME type
- (unknown)
- Detected type
- ZIP
- SHA-256
- 4d2d50e2362fc5771e39a80420c2b64883247dbe979b276c96e06f31185c2050
- MD5
- 672aa7bf2183d6f5157b2d1b59d7340b
- SHA-1
- 089bc4e2fde7156fec21e556548884a465cfc049
- First seen (VT)
- 6/18/2026, 11:40:04 PM
- Last analysis (VT)
- 6/18/2026, 11:40:04 PM
- First scan (MalwareTips)
- 7/21/2026, 8:36:24 AM
- Last scan (MalwareTips)
- 7/21/2026, 8:36:24 AM
Safety FAQ
Common questions about FS25_Antonov_AN2_YR.zip, answered from the scan data above.
- FS25_Antonov_AN2_YR.zip appears safe. 73 of 73 antivirus engines report it clean. As a habit, only open files you downloaded from the official source, since attackers sometimes distribute trojanised copies of legitimate software under the same name.
- FS25_Antonov_AN2_YR.zip is a compressed archive, about 59.9 MB. Our analysis found no threat indicators for it. A file's name can be reused by different files, so we identify it by its cryptographic hash (below).
- None — all 73 antivirus engines we queried report FS25_Antonov_AN2_YR.zip as clean. That's reassuring, though brand-new malware can briefly evade detection before vendors add signatures, so we also weigh the file's behaviour and reputation.
- The SHA-256 hash of FS25_Antonov_AN2_YR.zip is 4d2d50e2362fc5771e39a80420c2b64883247dbe979b276c96e06f31185c2050, and its MD5 is 672aa7bf2183d6f5157b2d1b59d7340b. This hash is the file's unique fingerprint — two files with the same SHA-256 are identical. Use it to confirm you're looking at exactly this file (not just one with the same name) when comparing against antivirus databases or a download's published checksum.
- Based on this scan, yes — FS25_Antonov_AN2_YR.zip shows no threat indicators. The important caveat is source: make sure you downloaded it from the official website or a trusted store, because attackers sometimes distribute malware-laced copies under a legitimate file's name. If your own antivirus flags it while we report it clean, that is most often a false positive, but verify the source before overriding your antivirus.
- This report reflects the scan run on July 21, 2026. Because a file's hash never changes, the identity of FS25_Antonov_AN2_YR.zip is fixed — but antivirus coverage improves over time, so a file that looks clean today can pick up detections later (and vice-versa). If you need the latest picture, MalwareTips staff can re-run the analysis from scratch.
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.