File verdict·Decided by the MT AI Engine
Our call

Safe

ZIP archive containing After Effects plugin; 64 engines including 17 tier-1 vendors report clean; no malicious behaviour detected.

Trust score88High trust
MT AI confidence · 92%
Aescripts Deep Glow 2 v1.1.1 [FileCR].zip
1.5 MB
592b622c216f4fc01ee5b4d01cde
Antivirus engines
0 of 75 flagged
Code signing
Unsigned
Age
First seen 9 days ago
MT AI Engine · our arbiter

The verdict, reasoned out.

Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.

92%Confidence
Very high
Reasoning

The file exhibits a clean profile across our entire antivirus network. Zero malicious detections from 64 reporting engines, with 17 tier-1 vendors unanimously undetected, rules out active malware payload. The medium prevalence (10 independent submitters) and absence of any sandbox malicious verdicts, dropped children, or malicious host contact further support a benign classification. While the filename's '[FileCR]' tag indicates distribution via a warez site (suggesting the software may be pirated or cracked), the file itself contains no detectable malicious code. The unsigned status and lack of signer history are typical for redistributed software archives and do not override the strong clean signal from our detection network.

Key signals · 5

Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.

  1. tier1Malicious=0; 17 tier-1 engines (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Fortinet, Avira, Emsisoft, F-Secure, GData, Ikarus, DrWeb, Avast, AVG) all undetected

  2. engines.reporting=64/75; malicious=0, suspicious=0 — unanimous clean across all reporting engines

  3. prevalence.classification=medium (10 submitters, 10 submissions); no malicious sandbox verdicts, no dropped children, no malicious host contact

  4. No external-intel hits: CIRCL=false, YARAify.ruleCount=0, MalwareBazaar=false

  5. Filename 'Aescripts Deep Glow 2 v1.1.1 [FileCR].zip' indicates commercial After Effects plugin; '[FileCR]' tag suggests warez origin but file content is benign

Points in its favour
  • 17 tier-1 antivirus engines (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Fortinet, Avira, Emsisoft, F-Secure, GData, Ikarus, DrWeb, Avast, AVG) all undetected
  • 64/75 reporting engines unanimous clean verdict
  • Medium prevalence (10 independent submitters) with no malicious reports
  • No sandbox malicious verdicts, no dropped children, no malicious host contact
  • No external-intelligence hits (CIRCL, YARAify, MalwareBazaar negative)
What to do

The file is safe to use from a malware perspective. However, be aware that the '[FileCR]' tag indicates this is a pirated or cracked version of commercial software; consider purchasing a legitimate license for ongoing support and legal compliance.

No researcher-database hits
External threat-intel sources were not collected for this scan.
Antivirus engine breakdown

0 detections across 75 engines

0 malicious0 suspicious75 clean
Tier-117 engines
0flag
Top commercial AVs (low FP rate)
Tier-238 engines
0flag
Mainstream engines with mixed FP rates
Low-trust20 engines
0flag
Heuristic / generic-AI engines (high FP rate)
All 75 engines report this file as clean.
Hash 592b622c216f… cross-referenced against 75 AV engines via our AV network.
Prevalence

How often this file shows up in the wild

Moderate prevalence — neither rare nor common. No strong prior applies.

Medium
Unique uploaders
10
Moderate upload volume.
Total submissions
10
Includes repeat uploads by the same source.
First seen by VT
9d ago
Jun 4, 2026
Prevalence quadrant
Rare · New
Targeted malware lives here
Common · New
Just-released software
Rare · Old
Niche or internal tooling
Common · Old
Trusted legitimate binaries
File identity

Forensic fingerprint

File biography
First seen (VT)
6/4/2026, 2:02:32 AM
First seen (MalwareBazaar)
Last analysis (VT)
6/4/2026, 2:02:32 AM
Scanned here
6/12/2026, 2:38:07 PM
File name
Aescripts Deep Glow 2 v1.1.1 [FileCR].zip
Size
1.51 MB
MIME type
(unknown)
Detected type
ZIP
SHA-256
592b622c216f4fc01efcfadcbcdd0a737b00720d15fb1b9c960831e5b4d01cde
MD5
84e84f222ef1dd82f7823c3ca446c853
SHA-1
84d0ab005667b8c75a575309bd37e649e821f361
First seen (VT)
6/4/2026, 2:02:32 AM
Last analysis (VT)
6/4/2026, 2:02:32 AM
First scan (MalwareTips)
6/12/2026, 2:38:07 PM
Last scan (MalwareTips)
6/12/2026, 2:38:07 PM
Behavior tags
zipencrypted
Community classification

Reviews & malware reports(0)

Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.

Loading…
Loading reports…
Files are processed in a streaming pass-through — MalwareTips never stores the binary on its servers. Only the scan result (hash, detections, verdict) is retained so the next person who scans the same file gets an instant answer. If you ran this file on your computer and are worried, scan your system with an up-to-date antivirus and change critical passwords from a different device.