File scan report
Verdict Low Risk
Is Kiddons
No antivirus engine detected a threat, but encryption, minimal prevalence, and unavailable evidence from the test run prevent reliable assessment of the archive's contents.
Read the whole reasonShow less
Why not Safe? Only 3 sources had seen it when we scanned it and no sandbox test run results are available.
Limited evidence · Nothing points to a problem, but little confirms who made it.
Good practice2 tips
Low Risk: no threat found, but we could not fully confirm this file.
Get it from the publisher's own website or app store, not from a re-upload or a link someone sent you.
Keep your security software on, and stop if the file does anything you didn't expect.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 63 flagged
- Flagged 0
- No detection 63
- No result 12
- Code signing Not applicable
- Test run Not run
- First seen 23d ago
Chapter 02
Why we think so
4 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 63 antivirus engines that checked it were free of detections, including 17 major antivirus engines. However, this ZIP is encrypted, so its embedded files may not have been inspectable; no completed runtime or contacted-host analysis is available to resolve that limitation.
The archive received no malicious or suspicious detections from 75 engines, including no major alerts. That is reassuring, but the encrypted ZIP tag means scanners may have evaluated only the container rather than every embedded file. The file was first observed on Oct 3, 2026 and has only five submissions from three sources, leaving little reputation history. No completed sandbox observation exists, and no complete contacted-host reputation result is available. External intelligence produced no matches, but this does not compensate for inaccessible archive contents.
What We Detected
None of the 63 antivirus engines that checked it flagged the ZIP, and all 17 reporting major antivirus engines returned no detection. External checks also found no MalwareBazaar, CIRCL, or YARAify match.
Threat Behavior
No completed sandbox observation is available, so execution behavior was not observed. The archive is tagged as encrypted, which may prevent engines from examining its embedded files, and no complete contacted-host reputation result is available.
What To Do Now
Do not execute extracted files solely because the archive has zero detections. Obtain the mod from its official release channel, inspect the extracted contents with protection enabled, and avoid entering an archive password supplied by an untrusted source.
Where this verdict could be wrong2 caveats
- Avast, BitDefender, ESET-NOD32, Kaspersky, and Microsoft reported no detection, but an encrypted archive can limit static inspection.
- The absence of community YARA matches and the absence of a MalwareBazaar listing provide no known-malware corroboration, though absence of a match does not establish harmless contents.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/63 antivirus engines reported a malicious or suspicious result.
- 17 major antivirus engines, including BitDefender, ESET-NOD32, Kaspersky, and Microsoft, reported no detection.
- No community YARA rule matched and the hash is not listed in the MalwareBazaar malware database.
- The brand-mismatch flag is not present, and no rule-based rules fired.
- The ZIP is encrypted, potentially concealing embedded files from static scanners.
- The file was first observed on Oct 3, 2026 and has only five recorded submissions.
- No completed observation from the test run is available.
- No contacted-host reputation cross-check was completed or saved.
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 63 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 3, 2026, 12:42 PM UTC
- SHA-256
5577e0214213b7cf2cfcdeec5d58efbd443dd5bac42619c4367911331f46b10a- SHA-1
0d225893d5bfe44a70ca90f68e9d4ed103cc7eed- MD5
9de7dc8487200018277e8d85326da019
About this file
KiddonsModMenu (2).zip is a ZIP file of 15.2 MB.
- Type and size
- ZIP · 15.2 MB
- Signer
- Not applicable
- First seen
- Oct 3, 2026On VirusTotal.
- Submitted by
- 3 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 04
Questions & answers
Short answers to the 5 questions people ask most about this file.
Is KiddonsModMenu (2).zip safe?
What is KiddonsModMenu (2).zip?
How many antivirus engines detected KiddonsModMenu (2).zip?
What is the SHA-256 hash of KiddonsModMenu (2).zip?
How up to date is this analysis of KiddonsModMenu (2).zip?
Community
Member reviews and reports for this exact file hash.