Safe
Zero malicious detections across 64 engines including 17 tier-1 vendors; medium prevalence (1501 submitters) indicates established benign distribution.
b73573af5eae6c9f77…dc88fca71cThe verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
The evidence strongly supports a benign classification. All 17 tier-1 antivirus engines report the file as undetected or clean, with zero malicious consensus. The 64-engine reporting pool shows zero malicious detections and zero suspicious flags. The file's medium prevalence across 1501 submitters over three months suggests it is a known, widely distributed utility rather than a rare or novel threat. The filename 'Prodkeys-22.0.0.zip' with numeric versioning is consistent with legitimate portable software. No adversarial input flags, triggered heuristics, external intelligence hits, sandbox malicious verdicts, or malicious host contacts were detected. The unsigned status is not unusual for freeware or portable utilities.
Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.
tier1Malicious=0; tier1ReportedClean=17 (Kaspersky, Microsoft, BitDefender, ESET-NOD32, Fortinet, Avira, Emsisoft, F-Secure, GData, Ikarus, DrWeb, Avast, AVG all undetected)
prevalence.classification='medium' — 1501 unique submitters, 1624 submissions since 2026-03-17 — established distribution pattern
engines.malicious=0/64 reporting; onlyLowTrustFlagging=false (no low-trust detections either) — universal clean consensus
No external-intel hits: CIRCL=false, YARAify.ruleCount=0, MalwareBazaar=false; no sandbox malicious verdict; no malicious contacted hosts
filenameAnalysis: hasNumericVersion=true, looksLikePortable=true, but looksLikeSecuritySoftware=false — consistent with legitimate portable software
- Zero malicious detections across 64 engines
- 17 tier-1 vendors all report clean/undetected
- Medium prevalence (1501 submitters, 1624 submissions) — established distribution
- No external intelligence hits (CIRCL, YARAify, MalwareBazaar)
- No malicious sandbox verdict, contacted hosts, or dropped children
This file is safe to use. The universal clean consensus across 64 antivirus engines, including all major tier-1 vendors, combined with medium prevalence indicating established distribution, confirms benign status.
0 detections across 74 engines
How often this file shows up in the wild
Moderate prevalence — neither rare nor common. No strong prior applies.
Forensic fingerprint
- File name
- Prodkeys-22.0.0.zip
- Size
- 7.2 KB
- MIME type
- (unknown)
- Detected type
- ZIP
- SHA-256
- b73573af5eae6c9f7739ca9931cebf04774cf2ba9d6ee98f2f04c2dc88fca71c
- MD5
- 04942f8c1c2e422be53a8a3ec997f53f
- SHA-1
- 5b7d6702fee2f95a70d4984f15c0044add40c7e2
- First seen (VT)
- 3/17/2026, 3:03:35 PM
- Last analysis (VT)
- 6/19/2026, 10:08:40 AM
- First scan (MalwareTips)
- 7/4/2026, 1:36:54 AM
- Last scan (MalwareTips)
- 7/4/2026, 1:36:54 AM
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.