File scan report
Verdict Safe
Is install_
A versioned installer batch script that none of the 61 analysing engines flagged, and whose only recorded behaviour is a curl download from the project's own sites.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Get this installer from the project's official release page and check it against any published checksum for the same version, then keep your security software enabled while it runs. If you did not set out to install this software, do not run it.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Not run
- First seen Today
Chapter 02
Why we think so
4 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 61 engines that analysed this batch script flagged it, and our inspection of the uploaded bytes found no harmful commands — only a download step that uses curl to fetch components from the project's own code hosting and discussion sites. It was first seen on Nov 7, 2026 and submitted by a single source, so what it pulls down at run time was not part of this inspection.
This is a small Windows batch script named as a versioned installer, first seen on Nov 7, 2026 and submitted by one source. None of the 61 engines that analysed it returned a detection, and every one of the 18 established engines in that set — Microsoft, Kaspersky, ESET-NOD32, BitDefender, Fortinet among them — reported it clean. Our own inspection of the uploaded bytes matched no harmful pattern: the only behaviour recorded is a download step using curl, and the links point at the project's own code hosting, its discussion forum and a programming Q&A site. The file name and content agree with each other, carrying both a version number and installer wording. No sandbox run and no completed reputation check of the contacted addresses were available, so the content fetched at run time was not observed here, and a batch file carries no signature to verify. Taken together, the engine results, our inspection and the referenced hosts give no indication of hostile intent.
What We Detected
The file is an 11 KB Windows batch script named as a versioned installer for a scientific imaging tool. None of the 61 engines that analysed it returned a detection, including 18 well-known engines such as Microsoft, Kaspersky, ESET-NOD32, BitDefender, Fortinet, Avast, AVG and DrWeb. Our own inspection of the uploaded bytes matched no harmful pattern at all: no encoded command lines, no defence tampering, no credential access and no hidden execution.
Threat Behavior
The only behaviour our inspection recorded is a download step. The script uses curl, the command-line downloader shipped with modern Windows, and references nine links, one of which points at an executable it fetches rather than carries. The named sites are the project's own discussion forum, its code hosting and a programming Q&A site — the shape of a project installer that pulls its components, not of a lure that fetches a payload from an unknown server. No obfuscation was recorded, and the script text is short enough that the installer logic is not concealed.
Two pieces of coverage were missing and should not be read as clean results: the script was not executed in a sandbox, and the reputation of the addresses it contacts was not cross-checked. Nothing here therefore describes what the script does once it runs — it describes what it contains.
What To Do Now
If you intended to install this software, get the script from the project's official release page rather than a mirror or an e-mail attachment, and compare it against any published checksum for the same version. Keep your security software enabled when you run it. If you did not go looking for this installer, it is safer not to run it.
Where this verdict could be wrong2 caveats
- One of the nine links in the script points at an executable that is downloaded at run time rather than shipped inside the file; that downloaded payload was not part of this inspection and could differ from what the project publishes.
- No sandbox execution was recorded and the reputation check of the contacted addresses was not completed, so nothing here describes what the script actually does when it runs.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 61 engines that analysed the file returned a detection, including 18 established engines such as Microsoft, Kaspersky, ESET-NOD32 and BitDefender.
- Our inspection of the uploaded bytes matched no harmful pattern; the only behaviour recorded is a download step using curl.
- The links in the script point at the project's own discussion forum and code hosting plus a programming Q&A site, the pattern of a project installer rather than a lure.
- The file name carries both a version number and installer wording, consistent with what the script actually does.
- The script fetches content from the internet and launches it, so its behaviour depends on what those addresses serve at the moment it runs.
- A batch file cannot carry a code signature, so nothing in the file itself confirms who built it or that it has not been altered.
- It was first seen on Nov 7, 2026 and has been submitted by only one source, so there is very little shared history behind it.
- One of the referenced links points at an executable that is downloaded rather than included, and that downloaded component was not part of this inspection.
7 sources checked · 5 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 61 antivirus engines that checked it flag it.
No risky structure found
We opened the uploaded batch script in an isolated sandbox and read its structure without running it.
9 links found, 1 pointing at a program or script. Only domains are shown; paths and query strings are never published.
Checked on Nov 7, 2026 while the file was uploaded. MalwareTips deleted its copy afterwards; VirusTotal keeps the uploaded file.
Sources checked
Every check behind this verdict
7 sources checked · 5 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Nov 7, 2026, 1:43 PM UTC
- SHA-256
03e920ebfa67cbdee6d0953907a0bce39c366f295625953a0af477c8468c7bed- SHA-1
7ad4adf4a10384046ffcee228e588a85dfc6338c- MD5
b3e31cf1fe917671cb2922ed42d38454
About this file
install_sct-7.3_win.bat is a DOS batch file file of 11.2 kB.
- Type and size
- DOS batch file · 11.2 kB
- Signer
- Not applicable
- First seen
- Nov 7, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 61 engines flagged this file
14 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-232 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Barely seen in the wild and first surfaced recently. That limits reputation evidence, but rarity alone is not proof of malware.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is install_sct-7.3_win.bat safe?
What is install_sct-7.3_win.bat?
How many antivirus engines detected install_sct-7.3_win.bat?
What is the SHA-256 hash of install_sct-7.3_win.bat?
Is it safe to run install_sct-7.3_win.bat?
How up to date is this analysis of install_sct-7.3_win.bat?
Community
Member reviews and reports for this exact file hash.