File scan report
Verdict Safe
Is run_
None of the 61 antivirus engines that checked it flagged this established batch file, while observation from the test run found no offensive behavior, persistence, injection, or…
Read the whole reasonShow less
Strong evidence · Widely seen for a long time, and nothing harmful found.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Completed
- First seen 1y ago
Chapter 02
Why we think so
0 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
One completed observation from the test run found no offensive techniques, persistence, or injection, and both contacted domains received full host-reputation checks without a malicious or suspicious result.
The antivirus evidence is uniformly favorable: none of the 61 antivirus engines that checked it flagged the file, and no independent detector reported a threat. A completed sandbox run recorded only two techniques common in legitimate software, with no offensive technique, injected process, persistence indicator, or malicious sandbox result. The two observed domains were both inspected against the host-reputation cache, with neither identified as malicious or suspicious. The sample is also well established, having appeared from 194 sources across 203 submissions over 428 days. No fired heuristic, malicious child, brand mismatch, or adverse feedback provides counter-evidence.
What We Detected
None of the 61 antivirus engines that checked it flagged run_server.bat. This includes all 17 reporting major antivirus engines, and there was no named malware family or hacking tool identification.
Threat Behavior
One completed sandbox run observed command-shell activity consistent with running related batch files. It recorded no offensive techniques, process injection, persistence indicators, registry changes, or malicious files it created. Both observed domains were covered by the host-reputation check, and neither had a malicious or suspicious classification.
Context
The sample has been observed for 428 days from 194 distinct sources and submitted 203 times. No rule-based rules fired, and no user, staff, or researcher warning was attached to this hash.
What To Do Now
The available evidence does not indicate malware activity. Because batch files can execute commands directly, review the script text before running it if it came from an unexpected source, and keep security software enabled.
- None of the 61 antivirus engines that checked it flagged the file.
- The completed observation from the test run found no offensive techniques, persistence, or process injection.
- Both observed network destinations were checked and had no malicious or suspicious reputation.
- The file has broad, established prevalence across 194 distinct sources.
- No rule-based rules or adverse user and staff reports were present.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 2sandbox rule tags
- 4spawned processes
- 2network contacts
- 2filesystem & mutex artifacts
Includes the sandbox verdicts, 2 mapped techniques and every process, file, registry and network entry.
Show the technical evidenceChapter 04
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 16, 2026, 4:00 AM UTC
- SHA-256
391d2b4db3001d59bfa1a24a0a20159b5b7383baee292020d53a3b24dd5e28f6- SHA-1
f6a5fd4248fda28eef59fa90711517cda9a237ac- MD5
3d78604be90a34f84889a8f5e242e392
About this file
run_server.bat is a DOS batch file file of 1.6 kB.
- Type and size
- DOS batch file · 1.6 kB
- Signer
- Not applicable
- First seen
- Aug 13, 2025On VirusTotal.
- Submitted by
- 194 distinct sources
First scanned
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is run_server.bat safe?
What is run_server.bat?
How many antivirus engines detected run_server.bat?
What is the SHA-256 hash of run_server.bat?
Is it safe to run run_server.bat?
How up to date is this analysis of run_server.bat?
Community
Member reviews and reports for this exact file hash.