The autorun exe (AutoPlay Application) File Malware Analysis
Gridinsoft Logo
File Icon

The autorun.exe (AutoPlay Application) File Analysis

Updated 1 day ago
Checked by Malware Check
autorun.exe

Technical Analysis

File Name autorun.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.231.174
Database Version 2026-01-07 03:00:38 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
6,448,128
File Size (bytes)
2026-01-07
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7f31c0d4427f1f8f342780a2340492f6
SHA1
948f511521dbfdf00a8aaf7e1f33278215845969
SHA256
01df943c0e9b1eb2bc54bfbd53c52e849cc848c3d70769d3cb7ea3443a1295c6
SHA512
ba171c8653436042d2726a840532cd87b450c827dda96bcb78b22cbb1a726d24676014833638a6ba7799a4aa16677182829e8e9fb16e3711cc0280c7c665fb64
ImpHash
05508bcbf28d4ed68c3aaa8a23eff893

PE Analysis

Basic Information

▼
Icon
Hash: 4538e1804613ed358849cde671095104
Fuzzy: 77eb027324a1656fa679f6b62fad2cda
dHash: b2b2b6b0f6647929
Image Base 0x00400000
Entry Point 0x00644f2b
Compilation Time 2015-02-10 21:03:05
Checksum 0x0062796d (Actual: 0x0062e7cc)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 23 libraries
Exports 0 functions
Resources 738 Resources
Sections 4 Sections

Version Information

▼
Comments Created with AutoPlay Media Studio
FileDescription AutoPlay Application
FileVersion 8.5.0.0
InternalName ams_runtime
LegalCopyright Runtime Engine Copyright © 2015 Indigo Rose Corporation (www.indigorose.com)
LegalTrademarks AutoPlay Media Studio is a Trademark of Indigo Rose Corporation
OriginalFilename ams_runtime.exe
ProductName AutoPlay Media Studio Runtime
ProductVersion 8.5.0.0
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,030,676 bytes 4,030,976 bytes 6.66 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 48372A2FDDF5240E0D09DF123A52D31D
.rdata 0x003da000 874,392 bytes 874,496 bytes 5.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0C4A8FCB56645EDF7D2A3E9B3F9EA81A
.data 0x004b0000 486,232 bytes 148,480 bytes 5.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 41E5A5E90798A9258932A35D8E705E0C
.rsrc 0x00527000 1,393,092 bytes 1,393,152 bytes 7.53 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9996538E3A7AC703C08E43A1A1B3BCCB
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 738 (1,313,883 bytes)
Resource Type Count Total Size Percentage
PNG 491 785,808 bytes
59.8%
STYLE_XML 4 77,256 bytes
5.9%
TEXTFILE 6 111,263 bytes
8.5%
RT_CURSOR 46 17,488 bytes
1.3%
RT_BITMAP 37 128,886 bytes
9.8%
RT_ICON 22 156,192 bytes
11.9%
RT_MENU 4 862 bytes
0.1%
RT_DIALOG 34 14,492 bytes
1.1%
RT_STRING 43 17,962 bytes
1.4%
RT_GROUP_CURSOR 41 890 bytes
0.1%
RT_GROUP_ICON 5 156 bytes
0%
RT_VERSION 1 1,080 bytes
0.1%
RT_MANIFEST 1 1,421 bytes
0.1%
None 3 127 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product AutoPlay Media Studio Runtime
Description AutoPlay Application
File Version 8.5.0.0
Original Name ams_runtime.exe
Internal Name ams_runtime
Copyright Runtime Engine Copyright © 2015 Indigo Rose Corporation (www.indigorose.com)

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware