File scan report
Verdict Safe
Is dolphin-
None of the 61 antivirus engines that checked it flagged this widely submitted archive, while one clean sandbox run provided no concrete target for the possible injection mapping.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Completed
- First seen 18d ago
Chapter 02
Why we think so
3 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 61 antivirus engines that checked it flagged the archive, including the 17 major antivirus engines that reported results, and it has already appeared from 162 sources. One sandbox run mapped possible injection and persistence techniques, but recorded no injected process, persistence indicator, malicious verdict, or sample network contact.
The strongest evidence is the absence of detections across 75 engines, including 17 major antivirus engines reporting no detection. The archive is also broadly distributed, with 162 sources and 173 submissions despite being recently observed. A completed sandbox run returned a clean result and recorded no sample network contacts. The and mappings warrant caution, but no injected process, persistence indicator, or malicious sandbox verdict substantiates them. External intelligence and the extracted-child rollup provide no confirmed malware finding, although ten children lack saved individual verdicts and host-reputation coverage was not completed.
What We Detected
None of the 61 antivirus engines that checked it flagged the 7-Zip archive, and all 17 major antivirus engines that reported results found no detection. The file has appeared from 162 sources across 173 submissions, indicating broad recent distribution. No malware-family label or malware-specific research rule matched it.
Threat Behavior
One completed sandbox run returned a clean result and observed the Dolphin executables, Qt libraries, crash-reporting processes, and related temporary files. It mapped activity to T1055 and T1547.001, but recorded no injected target process, persistence indicator, registry modification, or sample network contact. A separate reputation check of contacted hosts was not available, and ten extracted files lack saved individual verdicts.
What To Do Now
Use the archive only if it came from the expected project or distribution channel, and keep security software enabled while extracting and running it. Recheck the contained executables individually if stronger assurance is required.
Where this verdict could be wrong3 caveats
- The test run mapped activity to and T1547.001, techniques that can be used for injection and registry-run-key persistence, although no injected target or persistence indicator was recorded.
- The archive contains executable files, and all ten extracted children lack saved individual verdicts, leaving incomplete child-level coverage.
- No complete contacted-host reputation result is available, although the observed run recorded no sample network contacts.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 61 antivirus engines that checked it flagged the archive, including 17 major antivirus engines that reported no detection.
- The file has been submitted 173 times from 162 sources, indicating broad recent distribution.
- The completed sandbox run returned a clean result and recorded no sample network contact.
- No malware-specific research rules or known malware-feed matches were found.
- No extracted child has a saved malicious finding.
- The test run mapped possible process injection and registry-run-key persistence techniques without identifying a target or confirmed persistence change.
- The archive contains executable files, and ten extracted components lack saved individual verdicts.
- A complete reputation cross-check for contacted hosts was not available.
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 11sandbox rule tags
- 12spawned processes
- 0network contacts
- 36filesystem & mutex artifacts
Includes the sandbox verdicts, 11 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 13, 2026, 2:09 AM UTC
- SHA-256
bbfd13bf9e6d2a4164a15c392b1f32a9b18150e5136746b388704608fbb60f76- SHA-1
cbea70dfbce1341255e74c418ba6800124807ae6- MD5
7f4b5963dc234a52c80e4b8af92a4cb0
About this file
dolphin-2609a-x64.7z is a 7ZIP file of 20.0 MB.
- Type and size
- 7ZIP · 20.0 MB
- Signer
- Not applicable
- First seen
- Oct 8, 2026On VirusTotal.
- Submitted by
- 162 distinct sources
First scanned
Includes every engine result (75), 1 matched signature rule and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is dolphin-2609a-x64.7z safe?
What is dolphin-2609a-x64.7z?
How many antivirus engines detected dolphin-2609a-x64.7z?
What is the SHA-256 hash of dolphin-2609a-x64.7z?
Is it safe to open or extract dolphin-2609a-x64.7z?
How up to date is this analysis of dolphin-2609a-x64.7z?
Community
Member reviews and reports for this exact file hash.