File scan report
Verdict Safe
Is Roshutsu.
None of the 71 antivirus engines that checked it flag this widely shared executable, first seen on Dec 18, 2021, and five sandbox runs showed no high-risk behaviour.
Read the whole reasonShow less
Strong evidence · Widely seen for a long time, and nothing harmful found.
This file can be used normally; obtain it from the original source you trust and keep your antivirus protection enabled.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 71 flagged
- Flagged 0
- No detection 71
- No result 4
- Code signing Unsigned
- Test run Completed
- First seen 4y ago
Chapter 02
Why we think so
1 point against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
It has been submitted by 840 distinct sources since Dec 18, 2021, and sandbox runs recorded only routine activity with no injection, persistence or known-bad network contacts.
No engine flagged the file, and every major antivirus engine reported it clean. The file is widely distributed, with 840 distinct submitters over several years, which is typical of ordinary software. The combined sandbox verdict was clean, mapped only techniques common in legitimate software, and contacted no hosts with a malicious or suspicious reputation among the 24 checked. Reference databases and community malware rules returned no matches, and the antivirus analysis found no packing. The lack of a code signature is the main gap, but nothing else points to harm.
What We Detected
None of the 71 antivirus engines that checked it flagged this 64-bit Windows executable. It was first seen on Dec 18, 2021 and has been submitted by 840 distinct sources. Public malware databases and community rule sets returned no matches, and the antivirus analysis found no packer or encrypted code.
Threat Behavior
Across five sandbox runs the combined verdict was clean. Only techniques common in legitimate software were recorded; no process injection, persistence or dropped files were observed, and none of the 24 contacted hosts we checked has a malicious or suspicious reputation. Most network contacts were the analysis machine's own background traffic.
What To Do Now
The evidence supports normal use. The file is unsigned, so download it from the original source you trust and keep your security software enabled.
Where this verdict could be wrong2 caveats
- The file is unsigned, so its author cannot be confirmed from a signature.
- One third-party community annotation tagged the file as greyware, though no antivirus engine supports that label.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 71 antivirus engines that checked it flagged the file, and all major antivirus engines reported it clean.
- Shared by 840 distinct sources since Dec 18, 2021.
- The combined sandbox verdict was clean with no high-risk techniques.
- No matches in public malware databases or community malware rules.
- No packing or encrypted code found by the antivirus analysis.
- The executable carries no code signature, so its publisher cannot be confirmed.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 5 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 5isolated sandbox runs
- 6sandbox rule tags
- 2spawned processes
- 9network contacts
- 15filesystem & mutex artifacts
Includes the sandbox verdicts, 6 mapped techniques and every process, file, registry and network entry.
Show the technical evidenceChapter 04
Technical details
None of the 71 antivirus engines that checked it flag it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 25, 2026, 9:23 AM UTC
- SHA-256
105b3f64ede564752ecfc6d3c2d2bff1be42ebddca7113faf520253e56c06512- SHA-1
3ccf89ac311c699b16429a9135274895f4e5b2eb- MD5
34f5d9ec87b765b33e178b80e589829e
About this file
Roshutsu.exe is a Win32 EXE file of 653.8 kB.
- Type and size
- Win32 EXE · 653.8 kB
- Signer
- UnsignedNo code signature.
- First seen
- Dec 18, 2021On VirusTotal.
- Submitted by
- 840 distinct sources
- Packer
- None detected
- Entropy
- 1.18 of 8
First scanned
Includes every engine result (75), PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is Roshutsu.exe safe?
What is Roshutsu.exe?
How many antivirus engines detected Roshutsu.exe?
What is the SHA-256 hash of Roshutsu.exe?
Is it safe to run Roshutsu.exe?
How up to date is this analysis of Roshutsu.exe?
Community
Member reviews and reports for this exact file hash.