File scan report
Verdict Safe
Is DINGLECRAFT.
None of the 61 antivirus engines that checked it flagged this HTML file, and its completed sandbox run exposed no offensive behavior, malicious host contact, or persistence.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust where it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Completed
- First seen 15d ago
Chapter 02
Why we think so
2 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
One completed sandbox run showed no offensive techniques, malicious verdict, injected process, or persistence, while the fully covered host check found no known-malicious contacts; caution remains because the file is new and contains embedded active content.
The strongest evidence is the absence of detections: none of the 61 antivirus engines that checked it flagged the sample, and all 17 reporting major antivirus engines were silent. A completed sandbox run recorded no offensive techniques, malicious verdict, process injection, or persistence behavior. The host-reputation check covered all five distinct observed domains and IPs and found no known-malicious or suspicious hosts; two listed contacts were identified as sandbox background activity rather than sample activity. MalwareBazaar, CIRCL, and YARAify supplied no corroborating threat intelligence. Confidence is moderated because this is an uncommon 42.5 MB HTML file containing embedded JavaScript and base64 data.
What We Detected
None of the 61 antivirus engines that checked it flagged the file, including the 17 reporting major antivirus engines. No engine supplied a malware family or hacking tool label, and the available MalwareBazaar, CIRCL, and YARAify checks produced no matching intelligence.
Threat Behavior
One completed sandbox run opened the HTML file in web browsers. It recorded no offensive techniques, malicious sandbox verdict, process injection, persistence indicators, or dropped files. The host-reputation check covered all five distinct observed domains and IPs and found no known-malicious or suspicious hosts; two contacts were explicitly attributed to sandbox background traffic.
What To Do Now
The evidence does not identify hostile content, but the file is and contains embedded JavaScript and base64 data. Open it only if its source and purpose are expected, keep browser and security software enabled, and avoid entering credentials or granting downloads if the page behaves unexpectedly.
Where this verdict could be wrong2 caveats
- The file is and has only two submitters, so its reputation is not yet well established.
- Its 42.5 MB HTML content contains embedded JavaScript and base64 data, which can conceal active content even though no engine or runtime result identified a threat.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 61 antivirus engines that checked it flagged the file.
- All 17 reporting major antivirus engines returned no detection.
- The completed sandbox run showed no offensive behavior, process injection, persistence, or malicious verdict.
- The complete observed-host check found no known-malicious or suspicious contacts.
- Three external intelligence checks returned no matching threat information.
- The file was first observed on Oct 11, 2026 and has only two known submitters, leaving little reputation history.
- The unusually large HTML file contains embedded JavaScript and base64 data, increasing the amount of active or concealed content requiring trust in its source.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 2sandbox rule tags
- 3spawned processes
- 2network contacts
- 5filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
2MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1082· System recon
- T1574· Execution hijack
Observed activity
Processes started
3Programs the file ran, with their command lines.
msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "C:\Users\<USER>\Desktop\DINGLECRAFT.html"chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --load-extension="C:\Windows\crx" "about:blank"chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\DINGLECRAFT.html"
Network contacts
22 hosts, listed as 2 addresses. Links show the host and path only.
- IP address
150.171.110.195 - IP address
150.171.73.13
Files
5Files the file created, changed or deleted.
- Written
C:\ProgramData\Microsoft\Windows\WER\Temp - Written
C:\ProgramData\Microsoft\Windows\WER\Temp\2a787f68-11a3-40ca-99d4-d48f13bad343 - Written
C:\ProgramData\Microsoft\Windows\WER\ReportQueue - Written
C:\ProgramData\Microsoft\Windows\WER\Temp\34e2fdda-53c3-4116-a0e0-0d45641151ff - Written
C:\ProgramData\Microsoft\Windows\WER\ReportArchive
Sandbox background — not the file
5The analysis machine's own processes and connections, recorded in every run.
- VM process
WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3132 -s 3576 - VM host
edge-mobile-static.azureedge.net - VM host
business.bing.com - VM host
a1672.dscr.akamai.net - VM host
162.159.36.2
Chapter 04
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 11, 2026, 9:48 AM UTC
- SHA-256
8bedf779216bccf355a470a3db8693f85201969ea025f1b494cabdf15e68c6f3- SHA-1
03122bfecec4b972bc4c570dc28d885e9caa6807- MD5
8c1b6499c7b034e8f2dbf935bbd7a684
About this file
DINGLECRAFT.html is an HTML file of 42.5 MB.
- Type and size
- HTML · 42.5 MB
- Signer
- Not applicable
- First seen
- Oct 11, 2026On VirusTotal.
- Submitted by
- 2 distinct sourcesRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 61 engines flagged this file
14 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-232 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is DINGLECRAFT.html safe?
What is DINGLECRAFT.html?
How many antivirus engines detected DINGLECRAFT.html?
What is the SHA-256 hash of DINGLECRAFT.html?
Is it safe to open DINGLECRAFT.html?
How up to date is this analysis of DINGLECRAFT.html?
Community
Member reviews and reports for this exact file hash.