home

runscanner.exe

Runscanner

Moernaut

Publisher:
Runscanner.net  (signed by Moernaut)

Product:
Runscanner

Description:
Runscanner freeware startup analyzer

Version:
1.8.1.0

MD5:
53b0ffdba57f443e0814618c4ef05b0b

SHA-1:
d5b5f090880ff9901df5431c03f088e775849052

SHA-256:
b303bc35568c69920285da8bafec3543fd5e94d3b186425c49546a30f962939d

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/18/2024 1:10:25 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

Trend Micro House Call
TROJ_GEN.F47V0828
7.2.360

File size:
1.3 MB (1,402,624 bytes)

Product version:
1.8

Copyright:
Geert Moernaut

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\runscanner.exe

Digital Signature
Signed by:
Moernaut

Authority:
The USERTRUST Network

Valid from:
8/17/2008 1:00:00 AM

Valid to:
8/18/2009 12:59:59 AM

Subject:
CN=Moernaut, O=Moernaut, STREET=Filip De Pillecijnlaan 4b, L=Hamme, S=Oost Vlaanderen, PostalCode=9220, C=BE

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
70511F9ADCA0D9E72F4ACC3D078BC5B6

File PE Metadata
Compilation timestamp:
5/23/2009 2:17:13 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:CPcVNj/enfNByB5RTtZ+tgNzWaszz+gvYFzGtnlumOmEK/YhaOfA4wJordO:C0wFCTtZ+qkzygvYFytnlumOmE3h3460

Entry address:
0x1000

Entry point:
B8, A0, E2, 8F, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 13, 5F, AC, 93, F6, DA, 0E, 4A, 3E, 62, 1D, 64, 84, 49, A8, 19, BA, 7B, 93, E1, FA, D5, 53, B6, 4D, 63, EA, 56, 4C, 3D, CC, E5, 55, 7D, 29, 41, B3, 88, AC, CE, 01, 49, D9, BD, 9F, BA, DE, A5, 81, 3A, 58, 8F, CE, 0F, AA, EB, D5, 30, BE, B9, 9B, F5, 39, 56, EC, 83, 3C, 17, 4D, 35, 39, D2, B1, 14, C2, A7, 17, 02, 5E, 5A, E5, DF, 86, 21, 5F, 2B, 8D, 43, E5, C6, 4A, 3E, 47...
 
[+]

Entropy:
7.8415

Packer / compiler:
PECompact v2

Code size:
3.3 MB (3,507,712 bytes)

Scan runscanner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.