» migautoplay.exe
Overview
Analysis
File Details

migautoplay.exe

Windows Easy Transfer Autoplay

Windows Main Build Lab Account

File name:

migautoplay.exe

Publisher:

Microsoft Corporation (signed by Windows Main Build Lab Account)

Product:

Microsoft® Windows® Operating System

Description:

Windows Easy Transfer Autoplay

Version:

6.1.7077.0 (winmain_win7rc.090404-1255)

MD5:

f9aa65bc5ff9197ab01a852ed4db1932

SHA-1:

5fa74220dcaf1198968ed20f455bca0414fbd84f

SHA-256:

d8c47132e44db4b571eb4f6a7ee668317f7880e6b4fd0c7fcd824b162df8323a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/29/2024 7:40:40 AM UTC (today)

File size:

86.7 KB (88,800 bytes)

Product version:

6.1.7077.0

Original file name:

migautoplay.exe.mui

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Windows Main Build Lab Account

Authority:

MSIT Test CodeSign CA 2

Valid from:

3/13/2009 4:39:14 PM

Valid to:

3/13/2010 4:39:14 PM

Subject:

CN=Windows Main Build Lab Account

Issuer:

CN=MSIT Test CodeSign CA 2, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:

29C9F976000100003536

File PE Metadata

Compilation timestamp:

4/9/2009 10:28:56 AM

OS version:

6.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1536:puaQPD4VU/zh+9zAC6A6//DyeR6xXc1Lz0TK7is3wl/nED:YaQr4FzAJL4JTKsO

Entry address:

0x22F1

Entry point:

E8, 3B, 06, 00, 00, E9, 4E, FD, FF, FF, CC, CC, CC, CC, CC, FF, 25, DC, 10, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, E0, 10, 00, 01, CC, CC, CC, CC, CC, 3B, 0D, 00, 40, 00, 01, 75, 03, C2, 00, 00, E9, A0, 06, 00, 00, CC, CC, CC, CC, CC, FF, 25, EC, 10, 00, 01, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24... 
[+]

Entropy:

6.5885

Code size:

9 KB (9,216 bytes)

Scan migautoplay.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.