home

MIRAgent.exe

Mandiant Intelligent Response

MANDIANT Corporation

It runs as a separate (within the context of its own process) windows Service named “Intelligent Response Agent”.
Publisher:
MANDIANT Corporation  (signed and verified)

Product:
Mandiant Intelligent Response

Description:
Mandiant Agent Manager

Version:
1.3.18.0

MD5:
a099da9b1e2ec32b752a18f5d95763c7

SHA-1:
14aac1ad36cdbddf3108cc6fba5e1b0f294c9683

SHA-256:
a1eff415d53934271e23729b182e8c3df849904537c7fb5c73f55ec2ebee4f21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:33:31 PM UTC  (today)

File size:
3.1 MB (3,205,264 bytes)

Product version:
1.3.3

Copyright:
Copyright © 2009 Mandiant Corporation

Original file name:
MIRAgent.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mandiant\mandiant intelligent response agent\miragent.exe

Digital Signature
Signed by:
MANDIANT Corporation

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/16/2008 4:00:00 PM

Valid to:
11/13/2009 3:59:59 PM

Subject:
CN=MANDIANT Corporation, OU=PRODUCT DEVELOPMENT, O=MANDIANT Corporation, L=Alexandria, S=Virginia, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0A0BBDDED69A6C6303CF5641FCD39FBC

File PE Metadata
Compilation timestamp:
9/12/2009 6:25:31 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
49152:349EBlq9ZQ2F/xk6BK+XfcLCvyCjih1/Brr5ej9dBrsjD5tpwA/TTsp72/KUV6qS:o9E2DMefXyRnnej9Mdw

Entry address:
0x205E70

Entry point:
48, 83, EC, 28, E8, 87, 04, 00, 00, 48, 83, C4, 28, E9, 4E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 41, 8B, 00, 48, 8B, DA, 4C, 8B, C9, 44, 8B, D8, 4C, 8B, D1, 41, 83, E3, F8, A8, 04, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48, 08, 48, 03, 4B, 08, 0F, B6, 41, 03, A8, 0F, 74, 0B, 0F, B6, C0, 83, E0, F0, 48, 98, 4C, 03, C8, 4C, 33, CA, 49, 8B, C9, 48, 83, C4, 20, 5B...
 
[+]

Entropy:
6.3281

Code size:
2.1 MB (2,170,880 bytes)

Service
Display name:
Intelligent Response Agent

Service name:
IntelligentResponseAgent

Description:
MANDIANT Intelligent Response Agent

Type:
Win32OwnProcess


Scan MIRAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.