» msi_server.DLL
Overview
Analysis
File Details

msi_server.DLL

Microsoft Forefront Threat Management Gateway

ForefrontTMG Test Team

File name:

msi_server.DLL

Publisher:

Microsoft (R) Corporation (signed by ForefrontTMG Test Team)

Product:

Microsoft Forefront Threat Management Gateway

Description:

A DLL file for implementing the Custom Action of the MSI setup

Version:

7.0

MD5:

d3b1ea642d9c9f5d19d8ae98737f7d3c

SHA-1:

b37cc88e8094595c965899d905b05eda99892942

SHA-256:

9687ceaa4bdffbb0b11d8e7a1d871a806c090bf828a85eb9a76e800938c7e097

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/5/2024 2:44:10 AM UTC (today)

File size:

555.4 KB (568,680 bytes)

Product version:

7.0

Original file name:

msi_server.DLL

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\msib8fc.tmp

Digital Signature

Signed by:

ForefrontTMG Test Team

Authority:

Root Agency

Valid from:

4/3/2009 8:44:46 PM

Valid to:

4/3/2010 8:44:45 PM

Subject:

CN=ForefrontTMG Test Team, OU=TESTING ForefrontTMG ONLY

Issuer:

CN=Root Agency

Serial number:

36EEE8F085757D8749F9D495D760396F

File PE Metadata

Compilation timestamp:

10/13/2009 11:18:06 PM

OS version:

6.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:YguxOBUcLk5fq78j73Bgev1RqA/V05CRNDA55Xj5iRQakPf8XKSIp0KIwQ:ZKixAN0sRy5CRQak3YVIu7wQ

Entry address:

0x619CD

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 7F, 02, 00, 00, 5D, E9, 89, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, 08, C0, 06, 10, 75, 03, C2, 00, 00, E9, FA, 02, 00, 00, CC, CC, CC, CC, CC, 6A, 14, 68, 50, 5B, 06, 10, E8, CB, 01, 00, 00, A1, AC, 17, 07, 10, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, D4, 13, 00, 10, 59, EB, 51, 6A, 08, E8, C9, 03, 00, 00, 59, 83, 65, FC, 00, A1, AC, 17, 07, 10, 89, 45, E4, A1, A8, 17, 07, 10, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, E8, 98, 03, 00... 
[+]

Entropy:

5.1025

Code size:

424.5 KB (434,688 bytes)

Scan msi_server.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.