File scan report
Verdict Safe
Is §0
None of the 63 antivirus engines that checked it flagged this RAR archive, although its limited prevalence and lack of completed the test run warrant routine caution when…
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Keep security protection enabled, extract only in a controlled location, and rescan the individual contents before opening them. Do not execute unexpected programs or scripts from an untrusted source.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 63 flagged
- Flagged 0
- No detection 63
- No result 12
- Code signing Not applicable
- Test run Completed
- First seen 22d ago
Chapter 02
Why we think so
3 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 63 antivirus engines that checked it flagged the archive, and no malware-specific external intelligence matched it. Confidence is moderated because the file was first seen on Oct 3, 2026, has one known submission, and was not observed in a completed sandbox run.
The antivirus evidence contains no detections among 75 engines, including no major alerts. MalwareBazaar, CIRCL, and YARAify provided no corroborating intelligence, and no malicious file it created is recorded. Code signing is not meaningful for a RAR archive, so its absence carries no weight. The sample is rare and recently observed, which limits reputation-based assurance without itself demonstrating hostile intent. No completed observation from the test run or complete contacted-host reputation result is available, so the archive's extracted contents should still be handled cautiously.
What We Detected
None of the 63 antivirus engines that checked it flagged this RAR archive. Microsoft, Kaspersky, ESET-NOD32, BitDefender, and the other major antivirus engines returned no detection, while malware-specific external intelligence produced no match.
Threat Behavior
No completed sandbox run is available, so there is no observed behavior in the test run to assess. The recorded WinRAR interface settings reflect archive viewing activity and do not establish behavior by the archived content. No complete host-reputation cross-check is available.
What To Do Now
Keep security software enabled and scan files again after extraction before opening them. Because this archive is and uncommon, avoid running unexpected executables or scripts unless the source and contents are independently trusted.
Where this verdict could be wrong2 caveats
- The archive has been submitted only once and was first observed on Oct 3, 2026, so its reputation is not established.
- No completed sandbox run inspected behavior in the test run or confirmed what extracted files might do.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 63 antivirus engines that checked it reported a detection.
- Seventeen major antivirus engines returned no detection.
- No malware-specific research rule or malware repository match was found.
- No malicious dropped file is recorded.
- The archive was first seen on Oct 3, 2026 and has one known submission, leaving little reputation history.
- No completed the test run inspected the behavior of any extracted content.
- No complete reputation check is available for potential network hosts.
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 0spawned processes
- 0network contacts
- 0filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Observed activity
Registry and auto-start
6Settings the file changed, including ways to start again after a restart.
- Set
HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\Software\WinRAR\FileList\FileColumnWidths\mtime - Set
HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\Software\WinRAR\FileList\FileColumnWidths\name - Set
HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\Software\WinRAR\FileList\FileColumnWidths\size - Set
HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\Software\WinRAR\FileList\FileColumnWidths\type - Set
HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\Software\WinRAR\Interface\Themes\ShellExtBMP - Set
HKEY_USERS\S-1-5-21-575823232-3065301323-1442773979-1000\Software\WinRAR\Interface\Themes\ShellExtIcon
Chapter 04
Technical details
None of the 63 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 13, 2026, 3:03 PM UTC
- SHA-256
4e11f02c26d21ad6e10905270325c9c1745ef9fa100245299579bab984d79bd0- SHA-1
787bcc9426d1617b65a368c07812a733332be18d- MD5
da33ca4e762dde6b4de4dc5bdbf72f13
About this file
§0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar is an RAR file of 16.9 MB.
- Type and size
- RAR · 16.9 MB
- Signer
- Not applicable
- First seen
- Oct 3, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 63 engines flagged this file
12 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-233 engines0flagged
- Low-trust12 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is §0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar safe?
What is §0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar?
How many antivirus engines detected §0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar?
What is the SHA-256 hash of §0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar?
Is it safe to open or extract §0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar?
How up to date is this analysis of §0St§doc§0ki§dng §0sk§dy §7[§5v4§7].rar?
Community
Member reviews and reports for this exact file hash.