File verdict·Decided by the MT AI Engine
Our call

Safe

Rapr.exe is a signed Win32 executable with no malicious detections across 76 engines, including 17 Tier-1 scanners, and low positive reputation.

Verified · SignPath Foundation
Trust score6Critical
MT AI confidence · 95%
Rapr.exe
2.7 MB
098a0a67642d006adaa88a19dbd6
Antivirus engines
0 of 76 flagged
Code signing
Signed by SignPath Foundation
Age
First seen 2mo ago
MT AI Engine · our arbiter

The verdict, reasoned out.

Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.

95%Confidence
Very high
Reasoning

Rapr.exe is a 2.85 MB Win32 EXE first seen 20 days ago with a positive reputation score of 1. All 76 reporting engines, including 17 Tier-1 like BitDefender, Kaspersky, and ESET-NOD32, found it undetected or clean, with just one timeout. It has a valid Authenticode signature from SignPath Foundation dated March 31, 2026. No hits in external intel sources like MalwareBazaar or CIRCL. Our analysis sees no threat signals, making this a safe file despite its recent age.

Points in its favour
  • Valid Authenticode signature from SignPath Foundation.
  • 17 Tier-1 engines (BitDefender, Kaspersky, ESET-NOD32, etc.) report clean.
  • Zero malicious detections out of 76 engines.
  • No hits in MalwareBazaar, CIRCL, or YARAify.
  • Positive reputation (1), not community-flagged.
Points against
  • File is new, first seen 20 days ago.
  • Reputation score is low-positive at 1.
  • Network tag 'detect-debug-environment' may indicate anti-analysis traits common in both legit and suspicious tools.
What to do

Proceed with running the file if obtained from a trusted source. Keep your antivirus updated and scan periodically for changes.

No researcher-database hits
External threat-intel sources were not collected for this scan.
Antivirus engine breakdown

0 detections across 76 engines

0 malicious0 suspicious76 clean
Tier-117 engines
0flag
Top commercial AVs (low FP rate)
Tier-238 engines
0flag
Mainstream engines with mixed FP rates
Low-trust21 engines
0flag
Heuristic / generic-AI engines (high FP rate)
All 76 engines report this file as clean.
Hash 098a0a67642d… cross-referenced against 76 AV engines via our AV network.
File identity

Forensic fingerprint

File biography
First seen (VT)
3/31/2026, 3:49:51 AM
First seen (MalwareBazaar)
Last analysis (VT)
4/19/2026, 2:30:44 PM
Scanned here
4/20/2026, 3:03:19 PM
File name
Rapr.exe
Size
2.72 MB
MIME type
(unknown)
Detected type
Win32 EXE
SHA-256
098a0a67642d006ada63264de7bdac9df9c9bd802ac1bc8d37c8a8a88a19dbd6
MD5
9a18a3289f51a1b5fe355cd26e31ae62
SHA-1
9c098936ae0d077fa205dc2b2054fe1c951caad3
PE imphash
f34d5f2d4577ed6d9ceec516c1f5a744
First seen (VT)
3/31/2026, 3:49:51 AM
Last analysis (VT)
4/19/2026, 2:30:44 PM
First scan (MalwareTips)
4/20/2026, 1:59:31 PM
Last scan (MalwareTips)
4/20/2026, 3:03:19 PM
Code signer
SignPath Foundationverified
Community reputation
+1trusted
Behavior tags
overlaysignedpeexeassemblydetect-debug-environment
Community classification

Reviews & malware reports(0)

Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.

Loading…
Loading reports…
Scanned by
JackStaff
Files are processed in a streaming pass-through — MalwareTips never stores the binary on its servers. Only the scan result (hash, detections, verdict) is retained so the next person who scans the same file gets an instant answer. If you ran this file on your computer and are worried, scan your system with an up-to-date antivirus and change critical passwords from a different device.