home

migwiz.exe

Windows Easy Transfer

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Windows Easy Transfer

Version:
6.0.6002.18005 (lh_sp2rtm.090410-1830)

MD5:
a4d6bdb2a0ce8ee451e8108802e39c73

SHA-1:
d8fe7c55d44dbc1e9f23183fce86183017e24f49

SHA-256:
a7b9bd4aebc7375bd6689d6d91f02ea5c4c5fbec4cfb2763263ea81a95611def

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 10:08:54 AM UTC  (today)

File size:
156.5 KB (160,232 bytes)

Product version:
6.0.6002.18005

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
migwiz.exe.mui

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\windows\temp\temp_extraction\support\migwiz\migwiz.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/12/2008 10:12:30 PM

Valid to:
3/12/2010 10:22:30 PM

Subject:
CN=Microsoft Windows, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101E1A1000000000008

File PE Metadata
Compilation timestamp:
4/11/2009 6:02:01 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:S9JQmAuDDC90E4k3BFS4zD5gdRsuuIZZjnloa2rhP:MQFosF5KdeI3n2P

Entry address:
0x97F0

Entry point:
48, 83, EC, 28, E8, 2B, 03, 00, 00, 48, 83, C4, 28, E9, B6, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 66, 90, 66, 66, 66, 90, 66, 90, 48, 3B, 0D, D9, 18, 00, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, A1, 03, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 45, 8B, 18, 48, 8B, DA, 4C, 8B, C9, 41, 83, E3, F8, 41, F6, 00, 04, 4C, 8B, D1, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03...
 
[+]

Entropy:
6.9534

Code size:
39.5 KB (40,448 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.