File scan report
Verdict Safe
Is Capys-
Only 1 of the 67 antivirus engines that checked it flagged this ZIP with a generic label, while all higher-confidence engines were silent, making a false positive likely.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
1 of 67 flagged
- Flagged 1
- No detection 66
- No result 8
- Code signing Not applicable
- Test run Not run
- First seen Today
Chapter 02
Why we think so
3 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Only Bkav flagged this ZIP, using a generic malware label; none of the 18 higher-confidence engines reported a detection. The isolated alert is likely a false positive, although the archive was first seen on Nov 4, 2026 and its contents were not inspected because of its size.
One of the 67 antivirus engines that checked it flagged the archive, and the sole alert came from Bkav with a generic label rather than a named malware family. None of the 18 higher-confidence engines reported a detection, which strongly favors an isolated false positive. No malware-specific community rule or public sample-database entry corroborates the alert. However, the archive was submitted by only two sources and first seen on Nov 4, 2026, so its reputation is not established. Its internal files were not inspected and no completed observation from the test run is available, limiting confidence in the favorable engine pattern.
What We Detected
Only 1 of the 67 antivirus engines that checked it flagged this ZIP archive. Bkav reported the generic label W32.Malware.B1A2BDE, while none of the 18 higher-confidence engines detected it. No named malware family, malware-specific community rule, or public sample-database entry corroborated that result.
Threat Behavior
No completed observation from the test run is available. The archive contains a Windows executable, but our static analysis could not inspect the archive because of its size, so its internal files and capabilities were not examined. No complete contacted-host reputation result is available.
What To Do Now
The isolated generic detection is most consistent with a false positive. Because the archive has only two known submitters and lacks content inspection, obtain it from its expected source, keep security software enabled, and scan the extracted files before running anything.
Where this verdict could be wrong2 caveats
- The archive was submitted by only two sources and was first seen on Nov 4, 2026, so it lacks an established benign history.
- The archive contains a Windows executable, but its internal files were not inspected and no observation from the test run was completed.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Only 1 of the 67 antivirus engines that checked it flagged the archive.
- None of the 18 higher-confidence engines reported a detection.
- The sole alert used a generic label and received no malware-family corroboration.
- No malware-specific community rules or public sample-database entries matched the hash.
- The archive was first seen on Nov 4, 2026 and has only two known submitters.
- The archive contains a Windows executable, but its internal files were not inspected because of the archive's size.
- No completed observation from the test run or complete contacted-host reputation result is available.
7 sources checked · 4 complete · 2 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
1 of the 67 antivirus engines that checked it flags it.
File inspection not completed
The file (85 MB) is larger than our static analysis reads.
The file (85 MB) is larger than our static analysis reads. The antivirus and sandbox evidence in this report is unaffected.
Sources checked
Every check behind this verdict
7 sources checked · 4 complete · 2 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
The saved verdict treats these detections as likely false positives.
- BkavW32.Malware.B1A2BDE
File fingerprint
- Last analyzed
- Nov 4, 2026, 1:22 AM UTC
- SHA-256
87d52248b7e8f8fff1d5b6b3d26e1a9f4f0c56cabbdeaa971b0d7cbc73607b2f- SHA-1
ca07678d98489a4015edb6848448321122d206e4- MD5
ef41eef2b68029eaa459c87c657b6469
About this file
Capys-AA-Macro-v4.1.zip is a ZIP file of 84.6 MB.
- Type and size
- ZIP · 84.6 MB
- Signer
- Not applicable
- First seen
- Nov 4, 2026On VirusTotal.
- Submitted by
- 2 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
1 of 67 engines flagged this file
8 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-236 engines0flagged
- Low-trust13 engines1flagged
View all 75 engine results
- BkavMalicious: W32.Malware.B1A2BDE
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Barely seen in the wild and first surfaced recently. 1 antivirus detection make that low prevalence materially relevant, but rarity alone is not proof of malware.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is Capys-AA-Macro-v4.1.zip safe?
What is Capys-AA-Macro-v4.1.zip?
How many antivirus engines detected Capys-AA-Macro-v4.1.zip?
What is the SHA-256 hash of Capys-AA-Macro-v4.1.zip?
Is it safe to open or extract Capys-AA-Macro-v4.1.zip?
How up to date is this analysis of Capys-AA-Macro-v4.1.zip?
Community
Member reviews and reports for this exact file hash.
