home

MbotCommon.dll

MBOT Common

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
MBOT Common

Version:
6.3.9600.16384 (winblue_rtm.130821-1623)

MD5:
c9cfe7b701df33295470d3163a2dd08a

SHA-1:
65d5bf29fb8ed5e87b8144f2fd4c6917f9b89aea

SHA-256:
67e8250a2c46e520233784b08c85b24e77110ec605896e97a875fd6e2a04d54b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 5:37:18 AM UTC  (today)

File size:
123.2 KB (126,176 bytes)

Product version:
6.3.9600.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MbotCommon.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\windows kits\8.1\tools\x86\mbot\mbotcommon.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
MSIT Test CodeSign CA 3

Valid from:
2/28/2013 2:28:51 PM

Valid to:
6/21/2014 5:05:01 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=MSIT Test CodeSign CA 3, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:
7A5C1F17000000D6299F

File PE Metadata
Compilation timestamp:
8/21/2013 7:48:00 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:sOPFQb/eudrDMWNx+aixphG1IDw171Lue3vV:sOtyeud37YhsIDwlVP9

Entry address:
0x199DE

Entry point:
FF, 25, 94, C0, 01, 10, CC, CC, CC, CC, CC, C3, CC, CC, CC, CC, CC, 8B, 4D, F0, FF, 25, A8, C0, 01, 10, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, 8F, EA, FF, FF, B8, F8, 9B, 01, 10, E9, 8D, ED, FF, FF, CC, CC, CC, CC, CC, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, E4, 33, C8, E8, 6F, EA, FF, FF, B8, 24, 9C, 01, 10, E9, 6D, ED, FF, FF, CC, CC, CC, CC, CC, 8D, 4D, F0, E9, 6B, 6A, FF, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, EC, 33, C8, E8, 47, EA, FF, FF, B8, B0, 9C, 01, 10, E9, 45, ED, FF, FF, CC, CC, CC...
 
[+]

Entropy:
5.9241

Code size:
100.5 KB (102,912 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.