File scan report
Verdict Safe
Is autoruns.
None of the 72 antivirus engines that checked it flagged this startup-inspection executable, and it has a positive reputation over about 989 days with no threat-database listings.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
This file appears safe to use. Confirm that it carries a valid Microsoft signature, or download Autoruns from Microsoft's official Sysinternals page.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 72 flagged
- Flagged 0
- No detection 72
- No result 4
- Code signing Unsigned
- Test run Not run
- First seen 2y ago
Chapter 02
Why we think so
2 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
It has been circulating for roughly 989 days with a positive reputation and no listings in threat databases. A verified publisher signature was not recorded, so download such tools from Microsoft's official Sysinternals site.
No engine detected the file, and every major antivirus engine reported it undetected. The file has been seen for about 989 days and carries a positive community reputation. It is not listed in public malware-sharing databases, and no malware-specific rules matched. No sandbox run is available, so the assessment rests on static and reputation evidence. No verified signature was recorded, which matters because the genuine Autoruns utility is normally Microsoft-signed.
What We Detected
None of the 72 antivirus engines that checked it flagged this Windows executable. All 18 major antivirus engines, including Kaspersky, ESET and BitDefender, reported it undetected. There are no listings in public malware databases and no matching malware-specific rules.
Threat Behavior
No sandbox run was available, so behaviour in the test run was not observed. Static file properties show common traits such as WMI calls and debug-environment checks, which are typical of system utilities. The file has a long, clean history of about 989 days. No verified code signature was recorded for this copy.
What To Do Now
The evidence supports using this file. To be certain of its origin, check that its digital signature shows Microsoft Corporation, or obtain Autoruns directly from Microsoft's Sysinternals site.
Where this verdict could be wrong2 caveats
- No verified code signature was recorded, although the genuine Autoruns tool from Sysinternals is normally signed by Microsoft. This copy's origin therefore cannot be confirmed from the signature.
- No sandbox run is available, so behaviour in the test run was not observed.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 72 antivirus engines that checked it flagged the file
- All 18 major antivirus engines reported it clean
- Seen for about 989 days with a positive reputation
- No listings in public malware databases or matching malware rules
- No verified code signature was recorded for this copy
- No runtime sandbox observation is available
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 72 antivirus engines that checked it flag it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Apr 20, 2026, 6:30 PM UTC
- SHA-256
f41051697b220757f3612ecd00749b952ce7bcaadd9dc782d79ef0338e45c3b6- SHA-1
3b42f1e497c909d48343768b58e9e5222d540330- MD5
61506280fc7e663db6715ac2206af6d4
About this file
autoruns.exe is a Win32 EXE file of 1.8 MB.
- Type and size
- Win32 EXE · 1.8 MB
- Signer
- UnsignedNo code signature.
- First seen
- Feb 6, 2024On VirusTotal.
First scanned Updated
Antivirus consensus
0 of 72 engines flagged this file
4 of the 76 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-236 engines0flagged
- Low-trust18 engines0flagged
View all 76 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BaiduClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineClean
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is autoruns.exe safe?
What is autoruns.exe?
How many antivirus engines detected autoruns.exe?
What is the SHA-256 hash of autoruns.exe?
Is it safe to run autoruns.exe?
How up to date is this analysis of autoruns.exe?
Community
Member reviews and reports for this exact file hash.
