home

mscorlib.dll

Microsoft .NET Framework

Microsoft Corporation

MSCORLIB (Multilanguage Standard Common Object Runtime Library) is part of the .NET Framework CLR. It used to be known as the Microsoft Common Object Runtime Library.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
Microsoft Common Language Runtime Class Library

Version:
4.0.30319.276 (RTMGDR.030319-2700)

MD5:
d8bf64b22fe54540e97a542058364913

SHA-1:
2c9d4c4e068e5e04a3ef5b0a1295982731a8aecd

SHA-256:
58dc09a5c57214e8270267d5985bbd32d9aa3c5fd8b4a843b3c96e1084006809

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/26/2024 11:48:00 PM UTC  (a few moments ago)

File size:
4.7 MB (4,970,768 bytes)

Product version:
4.0.30319.276

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
mscorlib.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\mscorlib.dll\4f1967ce4c0000\mscorlib.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
11/1/2011 11:39:17 PM

Valid to:
2/1/2013 11:49:17 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
611AF5EA00000000006A

File PE Metadata
Compilation timestamp:
1/20/2012 2:10:38 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:S2xL9r/McikkEsoVo3u8Eg9sk/IRUno5OHIK9fCxsRUg0naK36cPw1PPk3AdGTTR:S2xL9r/Mcikkkm3oUHIne8R

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.1676

Code size:
4.3 MB (4,459,008 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.