» momscriptapi.dll
Overview
Analysis
File Details

momscriptapi.dll

System Center 2012 - Operations Manager

Microsoft Corporation

File name:

momscriptapi.dll

Publisher:

Microsoft Corp. (signed by Microsoft Corporation)

Product:

System Center 2012 - Operations Manager

Description:

MsMgmtAuxiliary Module

Version:

7.0.8560.0

MD5:

b5e801e5e2aaf6c4686b45f8d80ffba3

SHA-1:

2b3c4fc8a82c43e3399ddccaf9b739e0dd708e88

SHA-256:

5179d7fbfadd5de629997f4a1dadfb7a48928c44b3b4bd8ce9aed3e315070511

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/19/2024 11:49:06 PM UTC (a few moments ago)

File size:

670.3 KB (686,400 bytes)

Product version:

7.0.8560.0

Trademarks:

Microsoft® is a registered trademark of Microsoft Corporation.

Original file name:

MsMgmtAuxiliary.exe

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\system center operations manager\agent\momscriptapi.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

11/2/2011 12:39:17 AM

Valid to:

2/2/2013 12:49:17 AM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

611AF5EA00000000006A

Registration

CLSID:

{B27EBEAC-E711-40BF-896B-714A4C02EB39}

ProgID:

MOM.ScriptAPI.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

1/26/2012 9:54:40 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

3072:scz+BFDxnHyaH+Erabmn7TPZIW+dRM5PHO/hHYEfB8zkwxL7JRTUf0:sxBrHyaUmKrdRM5PHO/h32L9Of0

Entry address:

0x2100

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 0F, 84, C8, 3D, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, EB, 07, 90, 90, 90, 90, 90, 90, 90, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 41, 54, 48, 83, EC, 30, 49, 8B, F0, 8B, FA, 4C, 8B, E1, BB, 01, 00, 00, 00, 89, 58, E8, 89, 15, A5, AE, 02, 00, 85, D2, 0F, 84, 48, 19, 00, 00, 83, FA, 01, 74, 05, 83, FA, 02, 75, 2C, 48, 8B, 05... 
[+]

Entropy:

4.1402

Code size:

175 KB (179,200 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.