File scan report
Verdict Safe
Is ALL.
None of the 58 engines that analysed this RAR archive flagged it, and no malware databases or rule sets returned hits.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Handle it normally if you were expecting it, keeping your antivirus protection active while you extract and open the contents. If it arrived unexpectedly, confirm the sender through a separate channel before opening anything from it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 58 flagged
- Flagged 0
- No detection 58
- No result 16
- Code signing Not applicable
- Test run Not run
- First seen 7y ago
Chapter 02
Why we think so
3 points against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
This RAR archive was checked by 58 engines and none of them flagged it, including 18 high-reliability engines. Malware sample databases and community rule sets returned no hits, and the file has been visible to the scanning network since July 20, 2019. The main limitation is that its contents were never run in a sandbox, so caution is still reasonable if it arrives from an unknown source.
The antivirus network produced no detections at all across 58 engines that analysed the archive, with 18 high-reliability engines among them reporting nothing. Reference databases and community rule sets also came back empty, and no malware family is named anywhere in the results. The file is old — first seen on Jul 20, 2019 — but has only ever been submitted by three sources, so its history is thin rather than well attested. What is missing matters too: there was no sandbox execution and no inspection of the archive members, so nothing here describes how anything inside behaves when opened. Weighing the complete silence from every engine against that missing content-level look, the balance of evidence supports a clean call with a moderate confidence rather than a firm one.
What We Detected
This is a RAR archive of about 20 MB. The antivirus network returned no detections: none of the 58 engines that analysed it flagged it, and that group includes 18 engines we treat as highly reliable. No engine named a family, a packer or a potentially unwanted program, and no behaviour rules matched during the check.
The malware reference databases and community rule sets returned nothing — no sample-sharing entry, no family-specific rule, no known-good or known-bad software listing. The archive has been in circulation since July 20, 2019, but only three distinct sources have ever submitted it, so there is little shared history to lean on.
Threat Behavior
No sandbox observation is available for this file, so we cannot describe what any of its contents do when opened or extracted. No hostile network destinations were identified either, because the contacted-host reputation lookup was not completed for this file. In plain terms: the engines that scan inside archives found nothing, but nobody executed the members.
Archives are also the most common way to hand someone an installer, a document set or a bundle of files, and compressed containers can hide a single unwanted item among many ordinary ones. That is why an all-clear from the scanning engines is good evidence but not proof about what happens after extraction.
What To Do Now
If you expected this archive — for example from a colleague, a download link you chose, or a backup you made — the scanning result is a reasonable basis for handling it normally. Keep your antivirus protection enabled and let it scan the extracted files as you open them rather than pausing it beforehand.
If the archive arrived unexpectedly, as an e-mail attachment or through a link you did not request, treat it as unverified regardless of this result: extract nothing, do not run installers from it, and confirm with the sender through a channel you already trust.
Where this verdict could be wrong3 caveats
- Nobody looked inside the archive: no sandbox run and no content-level inspection were available, and none of the engines flagged any inner file, so a clean engine result on a compressed container is not a guarantee about what its members do when run.
- Only three sources have ever submitted this archive, so there is little community history behind it; a widely shared file is not proof of safety, and a rarely shared one is not proof of harm.
- The contacted-host reputation cross-check was not completed, so there is no independent network-reputation result to confirm the engines' silence.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 58 engines that analysed the archive flagged it, including 18 high-reliability engines.
- No malware sample database, family-specific rule set or known-software reference returned a hit for this file.
- The file has been visible to the scanning network since July 20, 2019 without acquiring a threat label or a family name.
- The archive members were never executed or inspected at content level, so their behaviour after extraction is unverified.
- Only three distinct sources have ever submitted this archive, so there is little shared history to corroborate the clean scan result.
- The archive arrived under a generic name, which gives no clue about what it is supposed to contain or who published it.
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 58 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Nov 7, 2026, 8:22 AM UTC
- SHA-256
28d847a6dee9476cf4cb4192ebc4bf922e723609cfb69f9ed8949a367d5d60a2- SHA-1
5d4fbf2bd7f1f4dad405facc9af360fb4ace3886- MD5
93f0664cdaaa37b5cd7f5735f4d4a505
About this file
ALL.rar is an RAR file of 21.3 MB.
- Type and size
- RAR · 21.3 MB
- Signer
- Not applicable
- First seen
- Jul 20, 2019On VirusTotal.
- Submitted by
- 3 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 58 engines flagged this file
16 of the 74 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-230 engines0flagged
- Low-trust10 engines0flagged
View all 74 engine results
- AcronisClean
- Ad-AwareClean
- AhnLab-V3Clean
- AlibabaNo result
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BaiduClean
- BitDefenderClean
- BitDefenderFalxNo result
- BitDefenderThetaClean
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeNo result
- CybereasonNo result
- CylanceNo result
- CynetClean
- CyrenClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FireEyeClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- LionicClean
- MalwarebytesClean
- MAXClean
- MaxSecureClean
- McAfeeClean
- McAfee-GW-EditionClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TrapmineNo result
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZonerClean
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is ALL.rar safe?
What is ALL.rar?
How many antivirus engines detected ALL.rar?
What is the SHA-256 hash of ALL.rar?
Is it safe to open or extract ALL.rar?
How up to date is this analysis of ALL.rar?
Community
Member reviews and reports for this exact file hash.