Clientrunner.exe triggering Norton Sonar

[velciane]

Filename: clientrunner.exe
Threat name: SONAR.Trafic2.RGC!g11Full Path: Not Available
____________________________

On computers as of 
7/2/2018 at 10:10:18 PM

Last Used 
7/2/2018 at 10:10:18 PM

Startup Item 
No

Launched 
Yes

SONAR Protection monitors for suspicious program activity on your computer.
___________________________

clientrunner.exe Threat name: SONAR.Trafic2.RGC!g11
Locate

Many Users
Tens of thousands of users in the Norton Community have used this file.

New
This file was released 13 days ago.

High
This file risk is high.

____________________________

Source: External Media

Source File:
clientrunner.exe
____________________________

File Actions

File: e:\steam\steamapps\common\world of warships\bin\clientrunner\ clientrunner.exe Threat Removed
File: e:\steam\ clientregistry.blob Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\ eula_confirmation.xml Threat Removed
File: e:\steam\steamapps\common\world of warships\ preferences.xml Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_000962 Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_000964 Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_000965 Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\ chat_pref_1029127297_wowsna.loc.xml Threat Removed
File: c:\users\vvebmike\appdata\local\temp\nvidia corporation\nv_cache\ 9022103eff257ddc1bbdb8e66a2744a8_fce8395f8fd8a84b_867eaa18426dcb18_0_2.toc Threat Removed
File: c:\users\vvebmike\appdata\local\temp\nvidia corporation\nv_cache\ 9022103eff257ddc1bbdb8e66a2744a8_fce8395f8fd8a84b_867eaa18426dcb18_0_4.bin Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_00096a Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_00096b Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_00096c Threat Removed
File: e:\steam\steamapps\common\world of warships\profile\cef_cache\cache\ f_00096f Threat Removed
____________________________

Suspicious Actions

(Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:146596) No action taken
Event: Attempt to start a remote thread in a process address space (Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:146596) No action taken
(Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:164644) No action taken
Event: Attempt to start a remote thread in a process address space (Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:164644) No action taken
(Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:167808) No action taken
Event: Attempt to start a remote thread in a process address space (Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:167808) No action taken
(Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:174164) No action taken
Event: Attempt to start a remote thread in a process address space (Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:174164) No action taken
(Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:184116) No action taken
Event: Attempt to start a remote thread in a process address space (Performed by e:\steam\steamapps\common\world of warships\bin\clientrunner\clientrunner.exe, PID:184116) No action taken
____________________________

File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

[MoBeer]

I had the same problem with AVG antivirus. Quarantined the clientrunner.exe file. I had to restore the file and deactivate AVG to play

[Ryuu]

https://steamcommunity.com/app/552990/discussions/1/1727575977551804844/

False positive. I'll inform the team though.