File scan report
Verdict Safe
Is system.
None of the 56 antivirus engines that checked it flagged this script, though absent sandbox and host-reputation coverage warrant normal caution before execution.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 56 flagged
- Flagged 0
- No detection 56
- No result 19
- Code signing Not applicable
- Test run Not run
- First seen 17d ago
Chapter 02
Why we think so
4 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 56 antivirus engines that checked it flagged the file, including 14 major antivirus engines that reported no detection, and no external malware intelligence corroborated a threat. However, it is with only one submission, and no completed sandbox or contacted-host reputation results are available.
MalwareBazaar and malware-specific YARA checks supplied no corroborating threat evidence. Code signing is not meaningful for this script-like file, so its absence carries no weight. The sample is and has only one submission, which limits reputation-based confidence. No completed sandbox observation or comprehensive contacted-host reputation result is available, so the assessment does not establish what the file would do when run.
What We Detected
None of the 56 antivirus engines that checked it flagged the file as malicious or suspicious.
Threat Behavior
No completed sandbox run is available, so behavior in the test run was not observed. No complete contacted-host reputation result is available either; therefore, network activity cannot be characterized as clean or hostile.
What To Do Now
The static evidence is reassuring, but the file is and has little reputation history. Only run it if its source and purpose are expected, keep security software enabled, and inspect the script contents or execute it in an isolated environment when provenance is uncertain.
Where this verdict could be wrong3 caveats
- The file is and has only one submission, so its clean detection profile has not accumulated much historical support.
- No sandbox run completed, leaving any behavior in the test run unobserved.
- The filename combines executable-looking and Python extensions, although no masquerade rule or hidden Unicode was detected.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 56 antivirus engines that checked it flagged the file.
- Fourteen major antivirus engines reported no detection.
- No known-sample intelligence or malware-specific YARA rule matched the hash.
- No malicious file it created, brand mismatch, hidden filename character, or confirmed hacking tool label was reported.
- The sample was first observed on Oct 9, 2026 and has only one recorded submission.
- No completed sandbox run is available to show what the script does when executed.
- No complete reputation check exists for any hosts the file might contact.
- The filename combines an executable-looking name with a Python extension, which merits source verification.
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 56 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 9, 2026, 10:58 AM UTC
- SHA-256
96fff330aebfbae23056015de0a93fa839d5a632ddd82f61f76c45756702b9ef- SHA-1
dcd254a345917532811d8c871ed636a1c21090b2- MD5
f7e26386056ad17380a429b5fc1556f6
About this file
system.exe.py is a VBA file of 78.5 kB.
- Type and size
- VBA · 78.5 kB
- Signer
- Not applicable
- First seen
- Oct 9, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned
Antivirus consensus
0 of 56 engines flagged this file
19 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-114 engines0flagged
- Tier-231 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaNo result
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastNo result
- Avast-MobileNo result
- AVGNo result
- AviraClean
- BitDefenderNo result
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticNo result
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneNo result
- SkyhighNo result
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSNo result
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootNo result
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Rarely uploaded, and first seen more than two weeks ago. Often niche legitimate software or internal tooling; not a strong malware signal on its own.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is system.exe.py safe?
What is system.exe.py?
How many antivirus engines detected system.exe.py?
What is the SHA-256 hash of system.exe.py?
Is it safe to run system.exe.py?
How up to date is this analysis of system.exe.py?
Community
Member reviews and reports for this exact file hash.