Unknown
Single tier-1 heuristic on an unsigned rare ZIP with no sandbox or network signals.
6ebea28b7fe1c783c4…e87516c720The reasoning behind this verdict
The MT AI Engine weighs every signal from this scan — antivirus detections, sandbox behaviour, code signing, prevalence and historical matches — to reach a single, evidence-based verdict.
The single Kaspersky detection is a generic heuristic label without family consensus or support from any other tier-1 engine. The file is unsigned, only 11 days old, and has been submitted by just three sources, placing it in the rare_new category. No sandbox behaviour, contacted hosts, or YARA/CIRCL matches exist to confirm malicious activity. Because coverage is limited and no decisive malicious signals are present, the appropriate classification is unknown rather than safe or malicious.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
engines.tier1Malicious=1 (Kaspersky HEUR:Trojan.Script.Generic) with tier1FamilyConsensus.strong=false
prevalence.classification=rare_new and signing.verified=false (unsigned)
externalIntel.yaraify.ruleCount=0 and behaviour.hasMaliciousSandboxVerdict absent
similarHashes.length=0 and triggeredHeuristics.length=0
- No sandbox malicious verdict
- No contacted malicious hosts
- No external intelligence hits
- Single tier-1 heuristic detection
- Unsigned archive
- rare_new prevalence
Treat the archive as unverified; open only in a controlled environment after local inspection.
What to do now
There isn't enough information to give this file a clear rating.
Be cautious — an unknown rating is not the same as a clean bill of health.
Only run it if it came directly from the official maker of the software.
When in doubt, don't open it — or scan it again later once it's more widely seen.
1 detection across 74 engines
How widely this file has been seen
Barely seen in the wild and first surfaced recently. This is the footprint of targeted malware the AV industry hasn't signatured yet — extra scrutiny is warranted.
Forensic fingerprint
- File name
- assignments1.zip
- Size
- 201.6 KB
- MIME type
- (unknown)
- Detected type
- ZIP
- SHA-256
- 6ebea28b7fe1c783c496c0a64c09398770d75f27bb38c39770357fe87516c720
- MD5
- 0be538769b0e48a8fffcaa00e6e45b7d
- SHA-1
- bea4de325c76fc39e0043c11fa9c4c0365c9940f
- First seen (VT)
- 7/1/2026, 6:54:29 PM
- Last analysis (VT)
- 7/3/2026, 1:44:54 AM
- First scan (MalwareTips)
- 7/12/2026, 3:29:59 PM
- Last scan (MalwareTips)
- 7/12/2026, 3:29:59 PM
Safety FAQ
Common questions about assignments1.zip, answered from the scan data above.
- We can't give assignments1.zip a confident verdict yet — too few engines have an opinion on this exact file. Uncommon or brand-new files often show little coverage before vendors catch up, so treat it as untrusted: don't opened or extracted it unless you're certain of the source.
- assignments1.zip is a compressed archive, about 202 KB. We identify a file by its cryptographic hash rather than its name, because the same filename can be reused by completely different files — the hash below is the reliable fingerprint.
- 1 of 74 antivirus engines flagged assignments1.zip, 1 of them as outright malicious. A small number of detections can include false positives, so we weigh which engines flagged it and what else the file does, not just the raw count.
- The SHA-256 hash of assignments1.zip is 6ebea28b7fe1c783c496c0a64c09398770d75f27bb38c39770357fe87516c720, and its MD5 is 0be538769b0e48a8fffcaa00e6e45b7d. This hash is the file's unique fingerprint — two files with the same SHA-256 are identical. Use it to confirm you're looking at exactly this file (not just one with the same name) when comparing against antivirus databases or a download's published checksum.
- This report reflects the scan run on July 12, 2026. Because a file's hash never changes, the identity of assignments1.zip is fixed — but antivirus coverage improves over time, so a file that looks clean today can pick up detections later (and vice-versa). If you need the latest picture, MalwareTips staff can re-run the analysis from scratch.
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.