home

msdbxi.dll

Microsoft CoReXT

Microsoft Corporation

Publisher:
Microsoft Corp.  (signed by Microsoft Corporation)

Product:
Microsoft® CoReXT

Description:
Msn Installer Application

Version:
10.50.0652.0

MD5:
c3fda6c9b751060ede61de76f26e86fa

SHA-1:
d08b4260f4532b8f5a7a49b35a9bb52acb9dd002

SHA-256:
4f173283c66caaeb742cc3b07d7ceb45efa5f1c9b903a1f654445f4185d18a8b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/18/2024 11:21:10 PM UTC  (a few moments ago)

File size:
105.9 KB (108,480 bytes)

Product version:
10.50.0652.0

Copyright:
Copyright © 1995-2012 Microsoft Corp.

Trademarks:
Microsoft® is a registered trademark of Microsoft Corporation.

Original file name:
msninst.exe

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\msdbxi.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/21/2012 2:34:19 PM

Valid to:
2/21/2013 2:44:19 PM

Subject:
CN=Microsoft Corporation MSN, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
611FE65200010000001B

File PE Metadata
Compilation timestamp:
8/20/2012 9:49:11 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
1536:3D/y0VA/q5DEf1hrmB2/C3CEmiFr0sLJZ+OBW3qaYSqMh:rrWylKFstAm4OBWaaYHMh

Entry address:
0xB0AA

Entry point:
8B, FF, 55, 8B, EC, 56, 8B, 75, 0C, 57, FF, 75, 10, 8B, 7D, 08, 56, 57, E8, 34, AB, 00, 00, 85, C0, 74, 4E, 83, FE, 01, 75, 2E, 8B, 35, 50, 10, 40, 27, 68, E8, 7B, 41, 27, 89, 3D, 3C, 7C, 41, 27, FF, D6, 68, 00, 7C, 41, 27, FF, D6, 68, 18, 7C, 41, 27, FF, 15, 78, 10, 40, 27, 57, FF, 15, 7C, 10, 40, 27, EB, 18, 85, F6, 75, 14, 8B, 35, 08, 10, 40, 27, 68, E8, 7B, 41, 27, FF, D6, 68, 00, 7C, 41, 27, FF, D6, 33, C0, 40, 5F, 5E, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 6A, 08, E8, DB, FD, FF, FF...
 
[+]

Entropy:
6.9704

Code size:
87.5 KB (89,600 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.