home

autorun.exe

Multimedia Builder runtime

D-Link Corp.

Publisher:
MediaChance  (signed by D-Link Corp.)

Product:
Multimedia Builder runtime

Description:
Runtime Module for MMB presentation

Version:
4.8.01

MD5:
23bb6a03ead35aeadc2cc44110da0264

SHA-1:
5fecd70b50d13cc1c720aee04d1e70ba6809724e

SHA-256:
955cd5f9786f37406801e839920d345da72bce3506f90e55368b71b63588042e

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 10:17:06 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
PAK_Generic.023
7.2.12

Trend Micro
PAK_Generic.023
10.465.12

File size:
442.8 KB (453,376 bytes)

Product version:
4.8.01

Copyright:
www.mediachance.com

Trademarks:
Mediachance

Original file name:
player.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
D-Link Corp.

Authority:
VeriSign, Inc.

Valid from:
7/16/2008 9:00:00 PM

Valid to:
7/17/2009 8:59:59 PM

Subject:
CN=D-Link Corp., OU=WRPD, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=D-Link Corp., L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7842872697A6359B797EE74ED0123B22

File PE Metadata
Compilation timestamp:
8/26/2001 3:53:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:bwA+B9lLf92EqgvWeXq/tktsJriMJ3PB2:gH2EZ+ea/+tstFdB2

Entry address:
0x12010B

Entry point:
B8, 00, 00, 52, 00, 6A, 00, 68, 9D, E1, 4D, 00, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 66, 9C, 60, 50, 8B, D8, 03, 00, 68, 70, BC, 00, 00, 6A, 00, FF, 50, 1C, 8B, CC, 8D, A0, 70, BC, 00, 00, 89, 61, 2E, 68, 00, 00, 40, 00, 51, 8B, 7C, 24, 04, 8B, 33, 66, 81, C7, 80, 07, 8D, 74, 1E, 08, 89, 3B, 53, 8B, 5E, 10, 56, 6A, 02, 68, 80, 08, 00, 00, 57, 6A, 27, 6A, 06, 56, 6A, 04, 68, 80, 08, 00, 00, 57, FF, D3, 83, EE, 08, 59, F3, A5, 59, 66, 83, C7, 68, 81, C6, 2E, 01, 00, 00, F3, A5, FF, D3, 58...
 
[+]

Packer / compiler:
Petite v2.1 (2)

Code size:
736 KB (753,664 bytes)

Scan autorun.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.