The sample was recently scanned in December 2025. Important Safety Note
The filename "CNI France" (which often stands for Carte Nationale d’Identité ) is frequently used as a lure in . Even if a specific version of this RAR file is marked as clean by a sandbox:
similar files if they were sent by an unknown or suspicious source.
Most antivirus engines do not flag this file as malicious.
Marked as Clean with no specific threats detected by automated scanners.
of the archive, as "clean" reports can sometimes miss sophisticated "living off the land" scripts or manual social engineering tactics.
The file is generally associated with automated malware analysis reports and often appears in sandboxed testing environments.