File verdict·Decided by the MT AI Engine
Our call

Safe

Our antivirus network shows zero detections across 61 engines including top tier-1 scanners; clean despite being a new unsigned batch script.

Trust score88High trust
MT AI confidence · 92%
System Reepair.bat
108 B
cfdb8d17d8aedbe661c8418182e3
Antivirus engines
0 of 75 flagged
Code signing
Unsigned
Age
First seen 1mo ago
MT AI Engine · our arbiter

The verdict, reasoned out.

Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.

92%Confidence
Very high
Reasoning

The file scans completely clean with strong coverage from reputable engines like BitDefender, ESET, Kaspersky, and Microsoft Defender, none of which raised alerts. Lacking any malicious labels, hacktool flags, or consensus, it doesn't match known threat patterns. While unsigned, brand new, and a .bat file with a potentially misleading name, the absence of behavioral data or triggered rules doesn't override the unanimous clean engine verdicts. We classify it safe but recommend caution with unknown scripts.

Key signals · 5

Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.

  1. engines.malicious=0, tier1Malicious=0, tier1ReportedClean=17

  2. prevalence.classification='rare_new', file.ageDays=0

  3. signing.signed=false

  4. engines.reporting=61/75

  5. triggeredHeuristics=[]

Points in its favour
  • 0 malicious detections from 61/75 engines
  • 17 tier-1 engines report clean
  • No triggered heuristics
  • No external intel hits
  • No adversarial filename flags
Points against
  • Unsigned batch script
  • Zero-day age (first submitted today)
  • Rare prevalence (1 submission)
  • Misspelled filename suggesting fake 'system repair' tool
  • No behavioral analysis available
What to do

The file is safe based on comprehensive clean scans, but always review batch script contents manually before execution to confirm no harmful commands.

No researcher-database hits
External threat-intel sources were not collected for this scan.
Antivirus engine breakdown

0 detections across 75 engines

0 malicious0 suspicious75 clean
Tier-117 engines
0flag
Top commercial AVs (low FP rate)
Tier-238 engines
0flag
Mainstream engines with mixed FP rates
Low-trust20 engines
0flag
Heuristic / generic-AI engines (high FP rate)
All 75 engines report this file as clean.
Hash cfdb8d17d8ae… cross-referenced against 75 AV engines via our AV network.
Prevalence

How often this file shows up in the wild

Barely seen in the wild and first surfaced recently. This is the footprint of targeted malware the AV industry hasn't signatured yet — extra scrutiny is warranted.

Rare & new
Unique uploaders
1
Very few people have ever uploaded this — rare.
Total submissions
1
Includes repeat uploads by the same source.
First seen by VT
1mo ago
Apr 24, 2026
Prevalence quadrant
here
Rare · New
Targeted malware lives here
Common · New
Just-released software
Rare · Old
Niche or internal tooling
Common · Old
Trusted legitimate binaries
File identity

Forensic fingerprint

File biography
First seen (VT)
4/24/2026, 6:04:52 AM
First seen (MalwareBazaar)
Last analysis (VT)
4/24/2026, 6:04:52 AM
Scanned here
4/24/2026, 6:06:50 AM
File name
System Reepair.bat
Size
108 B
MIME type
application/octet-stream
Detected type
Text
SHA-256
cfdb8d17d8aedbe66152e2d76fa5005fb1e23175c812cc26cc87b6c8418182e3
MD5
e6acc9161dfd4e7a369a03845c761c6f
SHA-1
da181a155511484293cce00576577a5f56e5e58d
First seen (VT)
4/24/2026, 6:04:52 AM
Last analysis (VT)
4/24/2026, 6:04:52 AM
First scan (MalwareTips)
4/24/2026, 6:05:53 AM
Last scan (MalwareTips)
4/24/2026, 6:06:50 AM
Behavior tags
text
Community classification

Reviews & malware reports(0)

Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.

Loading…
Loading reports…
Scanned by
harlan4096Staff
Files are processed in a streaming pass-through — MalwareTips never stores the binary on its servers. Only the scan result (hash, detections, verdict) is retained so the next person who scans the same file gets an instant answer. If you ran this file on your computer and are worried, scan your system with an up-to-date antivirus and change critical passwords from a different device.