XMPlay 4.1 3/66 security vendors flagged this file as malicious

Started by danmark_ori,

danmark_ori

tainted download?

https://www.virustotal.com/gui/file/d3ce9a2f3606b348e4dc6bb2cc4dd8b4df9c53e5493ed376c9341cecdcb71b78?nocache=1

3/66 security vendors flagged this file as malicious
Reanalyze
< d3ce9a2f3606b348e4dc6bb2cc4dd8b4df9c53e5493ed376c9341cecdcb71b78 >
xmplay41.zip


Hash: < d3ce9a2f3606b348e4dc6bb2cc4dd8b4df9c53e5493ed376c9341cecdcb71b78 >

Infection:       TR/Crypt.XPACK.Gen


Scanrapport - F-Secure
dinsdag 23 december 2025 19.25.09 uur - 19.25.10 uur (UTC+01:00)

Computernaam: DESKTOP-365HR9N

Scantype: Scannen op virussen
Doelen:

    C:\Users\Henk\Downloads\xmplay41.zip

Resultaten

    Schadelijke items gevonden: 1
    Gescande items: 2

Schadelijke items:

    TR/Crypt.XPACK.Gen
        C:\Users\Henk\Downloads\xmplay41.zip - In quarantaine

Versiegegevens
Scanengines:

    Core: 2.0.3.52
    Detection: 8.4.0.44 (2025-12-18)
    EPP: 1.0.2511.7338
    ODS: 1.0.2511.3135
    Quarantine: 1.0.2510.2056
    Remediation: 1.0.2511.2785
    VDF: 8.20.69.208 (2025-12-23)

Copyright © 1998 - 2025 F-Secure Corporation. Alle rechten voorbehouden.





danmark_ori

might be a false positive, yet even then maybe it's handy to address the issue. Preventing disappointed users, both prospects as existing ones.

yoba

That's because executable and plugins are  packed by PETITE.
Wait few days before AV databases will be updated and there will be less warnings

Ian @ un4seen

It appears this "TR/Crypt.XPACK.Gen" detection has already cleared up now?

danmark_ori

F-Secure Customer Care, CET 19:15

 
Thank you for your submission.
Our analysis has found that the file you submitted is clean.
Our security products recently had a False Positive related to this file and the issue was then fixed automatically via F-Secure's Security Cloud.
In the event you are still experiencing a detection on this file, please send us a screenshot or scanning report showing the detection details for further investigation.
If there is anything else we can help you with, please do not hesitate to contact us again.
 

Best regards,
Johan

Research Labs

F-Secure Corporation


Visit our Labs blog at blog.f-secure.com/
Give and get advice in our F-Secure Community at community.f-secure.com
Contact Support at f-secure.com/support