Safe
RAR archive with no malicious detections across 18 tier-1 engines and 526 days of circulation; consistent with legitimate installer.
ae9c8347758fd17ec4…e10c09e030The verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
The evidence strongly supports a benign classification. Zero tier-1 malicious detections across major vendors (Microsoft, Kaspersky, BitDefender, ESET-NOD32, Fortinet, McAfee, Avast, AVG, Avira, DrWeb, Emsisoft, F-Secure, GData, Ikarus) combined with zero malicious labels in the entire detection set indicates no consensus on harmful intent. The absence of sandbox behaviour data, dropped children, malicious host contacts, and external intelligence hits (CIRCL, MalwareBazaar, YARAify) further reinforces benign status. The filename suggests a legitimate installer, and the 526-day submission history with medium prevalence is typical of commodity software rather than active malware.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
tier1Malicious=0; 18 tier-1 engines (Microsoft, Kaspersky, BitDefender, ESET-NOD32, Fortinet, McAfee, Avast, AVG, Avira, DrWeb, Emsisoft, F-Secure, GData, Ikarus) all undetected
0/61 reporting engines flagged malicious; allMaliciousLabels array empty
No sandbox behaviour data, no dropped children, no malicious host contacts, no external intel hits (CIRCL, MalwareBazaar, YARAify all false)
Medium prevalence: 72 unique submitters, 82 submissions over 526 days — consistent with legitimate installer distribution
filenameAnalysis.hasInstallerHint=true; no adversarial flags; triggeredHeuristics empty
- 18 tier-1 antivirus engines report clean (Microsoft, Kaspersky, BitDefender, ESET-NOD32, Fortinet, McAfee, Avast, AVG, Avira, DrWeb, Emsisoft, F-Secure, GData, Ikarus)
- Zero malicious detections across all 61 reporting engines
- No sandbox malicious verdicts, no dropped children, no malicious host contacts
- No external intelligence hits (CIRCL, MalwareBazaar, YARAify all negative)
- Medium prevalence over 526 days (72 submitters, 82 submissions) consistent with legitimate software distribution
This file is safe to use. It shows no signs of malware across comprehensive antivirus scanning and behaviour analysis. If obtained from a trusted source, proceed with normal extraction and use.
0 detections across 75 engines
How often this file shows up in the wild
Moderate prevalence — neither rare nor common. No strong prior applies.
Forensic fingerprint
- File name
- installer.rar
- Size
- 4.47 MB
- MIME type
- (unknown)
- Detected type
- RAR
- SHA-256
- ae9c8347758fd17ec40d36de14e625444d19d9db2a9013f130c970e10c09e030
- MD5
- f20933e4a02ba1079a8c831f18245475
- SHA-1
- 62a469aa639fb4e2bae8148e6ca2ab08f66dd141
- First seen (VT)
- 1/17/2025, 9:44:07 AM
- Last analysis (VT)
- 1/17/2025, 9:44:07 AM
- First scan (MalwareTips)
- 6/27/2026, 8:54:07 PM
- Last scan (MalwareTips)
- 6/27/2026, 8:54:07 PM
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.