File scan report
Verdict Safe
Is index.
This small PHP script has no detections from any of 73 antivirus engines, no threat-intelligence hits, and no hostile behaviour in its sandbox run.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
This script can be used if it came from a source you trust; if it appeared unexpectedly on a web server, compare it against the original project files.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 57 flagged
- Flagged 0
- No detection 57
- No result 16
- Code signing Not applicable
- Test run Completed
- First seen 4y ago
Chapter 02
Why we think so
0 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 57 antivirus engines that checked it flagged this PHP script, including every major antivirus engine that analysed it. Public malware databases and community rules hold no record of it, and its sandbox run showed only ordinary system background activity.
None of the 57 antivirus engines that checked it flagged the file, and all 17 major antivirus engines that analysed it reported it clean. Malware-sharing databases, community rule sets and known-software references returned no matches. The single sandbox run recorded no processes, injections or high-risk techniques, and all 15 contacted hosts we cross-checked carry no malicious or suspicious reputation. The file has been known for over four years without gaining detections. Because PHP runs on web servers, desktop sandbox evidence is limited, but nothing in the evidence points to harm.
What We Detected
This 2.7 KB PHP script was flagged by none of the 57 antivirus engines that checked it; all 17 major antivirus engines that analysed it reported it clean. No public malware database or malware-specific rule matched it.
Threat Behavior
The sandbox run showed no high-risk techniques, no injected processes and no persistence. Recorded network activity consisted of content-delivery, certificate-check and Apple service hosts plus one Discord domain; none of the 15 hosts we cross-checked has a malicious or suspicious reputation. PHP is server-side code, so a desktop sandbox may not exercise its logic.
What To Do Now
No action is needed if this script came from a website or project you trust. If it appeared unexpectedly on a web server, review its contents or compare it with the original project files.
Where this verdict could be wrong2 caveats
- The sandbox run recorded a contact with a Discord domain, which some web shells and stealers use, but the other contacts look like ordinary macOS background traffic and no host was flagged.
- Server-side PHP code often does nothing visible in a desktop sandbox, so the observation from the test run says little about what the script does on a web server.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 57 antivirus engines that checked it flagged the file
- Every major antivirus engine that analysed it reported it clean
- No matches in public malware databases or malware-specific rule sets
- No high-risk behaviour and no flagged hosts in the sandbox run
- Known for over four years without gaining detections
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 1 isolated test; no test environment rated what it did as risky.
Test run summary
Capture complete- 1isolated sandbox run
- 0spawned processes
- 15network contacts
- 15filesystem & mutex artifacts
Includes every process, file, registry and network entry and 6 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 57 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 20, 2026, 2:53 PM UTC
- SHA-256
7b2718232c95775d944e42038faa76c10e1140f06c1de870c1a57011fbfcc60d- SHA-1
4cd7f7cec31738ed25d5ea533841e53c08881d14- MD5
6fd3638bcad34eb0bce94cbf0af66c24
About this file
index.php is a PHP file of 2.7 kB.
- Type and size
- PHP · 2.7 kB
- Signer
- Not applicable
- First seen
- Apr 20, 2022On VirusTotal.
- Submitted by
- 4 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Includes every engine result (73) and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is index.php safe?
What is index.php?
How many antivirus engines detected index.php?
What is the SHA-256 hash of index.php?
Is it safe to open index.php?
How up to date is this analysis of index.php?
Community
Member reviews and reports for this exact file hash.