Safe
Windows executable 'autoruns.exe' (1.7 MB) scanned clean by all 76 engines in our antivirus network, including BitDefender, Kaspersky, ESET, and Avast.
f41051697b220757f3…338e45c3b6The verdict, reasoned out.
Not a rules engine. The MT AI Engine reads every signal we collected, weighs them against history, and commits to an answer.
The file autoruns.exe is a 1.7 MB Win32 PE executable with an import hash of fc18756ef5e758178da800fd88864516, showing behaviors like checking user input, calling WMI, long sleeps, having an overlay, and detecting debug environments. Despite these common traits in both legit and suspicious files, all 76 engines in our network, including tier-1 protectors like BitDefender, Kaspersky, ESET, Avast, Microsoft, and Sophos, report it as undetected. No popular threat labels or names match it. This unanimous clean scan across dozens of engines indicates a safe file with no malware signatures. If run, it poses no risk based on our analysis. Proceed with normal use.
- All 76 engines in our antivirus network report undetected, including tier-1 like BitDefender, Kaspersky, ESET, Avast, Microsoft, Sophos, and Fortinet.
- File is digitally signed, a strong indicator of legitimacy.
- No popular threat labels or names from our research.
- Consistent clean results across diverse engines like CrowdStrike, Elastic, and DrWeb.
- Standard Win32 EXE with known import hash, first seen over a year ago with no flags.
This file is safe to use—no quarantine or deletion needed. Run it normally if it's from a trusted source like Microsoft Sysinternals tools.
0 detections across 76 engines
Forensic fingerprint
- File name
- autoruns.exe
- Size
- 1.68 MB
- MIME type
- (unknown)
- Detected type
- Win32 EXE
- SHA-256
- f41051697b220757f3612ecd00749b952ce7bcaadd9dc782d79ef0338e45c3b6
- MD5
- 61506280fc7e663db6715ac2206af6d4
- SHA-1
- 3b42f1e497c909d48343768b58e9e5222d540330
- PE imphash
- fc18756ef5e758178da800fd88864516
- First seen (VT)
- 2/6/2024, 4:33:04 PM
- Last analysis (VT)
- 4/18/2026, 2:43:40 AM
- First scan (MalwareTips)
- 4/20/2026, 1:57:14 PM
- Last scan (MalwareTips)
- 4/20/2026, 2:30:10 PM
- Community reputation
- +30trusted
Reviews & malware reports(0)
Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.