I recently downloaded a very popular open-source application. Usually, I compile open-source applications myself after reading the source code. But my compiler box was busy with many tasks, so I decided to download the pre-compiled executable and just run it on a temporary system. Although that system gets reformatted every day, and doesn't have any network connections, I still wanted to scan the executable for malware.
The executable is distributed by the developer as a zipped executable. I uploaded the zipped executable to VirusTotal, and I was surprised to see that VirusTotal had no cached results for the hash of the executable of this popular application. I then performed the same action for the extracted executable. Same result.
Does that mean that no one - including the developer - even bothered to scan the executable on VirusTotal? Or can one scan files on VirusTotal without the results being cached?