» msb1star.DLL
Overview
Analysis
File Details

msb1star.DLL

Coltec's Arabic Stemmer

Coltec Middle East Company for Computer Technologies

File name:

msb1star.DLL

Publisher:

COLTEC M.E. (signed by Coltec Middle East Company for Computer Technologies)

Product:

Coltec's Arabic Stemmer

Description:

Arabic Stemmer for MS Office 2009, by COLTEC M.E.

Version:

14, 0, 0, 1

MD5:

79fada9b1728270efd5791d5b2e6f48d

SHA-1:

9dcfbf8d3c8f6a7f3afbb6f15414f6ea8b834b4c

SHA-256:

5e803b4360425ca652a1916a5ac02ae08466f77528a157eddca5961bab3ad785

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 12:51:50 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Win32/Heur

2015.0.4477

File size:

215.9 KB (221,072 bytes)

Product version:

14, 0, 0, 1

Trademarks:

Microsoft® is a registered trademark of Microsoft Corporation.

Original file name:

msb1star.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

Arabic

Common path:

C:\Program Files\common files\microsoft shared\translat\msb1star.dll

Digital Signature

Signed by:

Coltec Middle East Company for Computer Technologies

Authority:

VeriSign, Inc.

Valid from:

3/2/2009 6:00:00 PM

Valid to:

3/3/2010 5:59:59 PM

Subject:

CN=Coltec Middle East Company for Computer Technologies, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Coltec Middle East Company for Computer Technologies, S=Cairo, C=EG

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3EDDBF167C4282F8C1FF1FD674FAB091

File PE Metadata

Compilation timestamp:

2/15/2009 10:46:10 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:Zjxxy29FnryLJiJHjKSdme58REEj9hI4JrqIT3VESTktwhtZRZRASH75jIed:tDD58REgIDwht4eNN

Entry address:

0xC51E

Entry point:

E2, 1F, 04, 41, 3C, 0E, BD, F4, 17, D6, 13, 0F, ED, AF, EF, 4A, D3, B2, 3B, A1, 32, D3, E9, 9E, 43, 97, 7D, AB, 4B, F0, 75, 1E, 50, 97, 1C, 51, 8F, 3B, 0D, 4F, 25, 4F, 4F, E3, 85, E5, B8, 3A, 05, 74, 87, 4A, 09, 7B, 78, B4, 37, 09, CF, F5, 7A, 05, 45, E2, 2E, 58, 74, E1, 8D, 11, 7F, 81, 93, 58, 69, 76, A4, F5, A0, 88, 8E, EE, 57, 8A, 57, C2, 93, A3, AE, F9, 9A, D1, D2, F5, 4B, B5, 1B, 22, 7E, 26, 7A, E1, 49, C1, 69, 93, C5, AC, 9A, DF, BF, 81, 26, 30, 14, B4, 7C, 9D, 86, 2D, 86, D1, 86, 5D, A3, DF, 94, 27... 
[+]

Entropy:

6.7334

Code size:

158 KB (161,792 bytes)

Scan msb1star.DLL - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.