mblctr.exe

  • File Path: C:\Windows\system32\mblctr.exe
  • Description: Windows Mobility Center

Screenshot

mblctr.exe

Hashes

Type Hash
MD5 D3DB14EABB2679E08020BCD0C96FA9F6
SHA1 578DCA7AAD29409634064579D269E61E1F07D9DD
SHA256 3BAA1DC0756EBB0C2C70A31BE7147863D8D8BA056C1AA7F979307F8790D1FF69
SHA384 DE36EEA28157AF7CF0FD68BD9FC7209E4380E5CDF536B1CAD610D63CF815B9F259947136146BA4F2982060BAA0E9FB53
SHA512 14DC895AE458FF0CA13D9C27AA5B4CFC906D338603D43389BB5F4429BE593A587818855D1FE938F9EBEBF46467FB0C1AB28247E8F9F5357098E8B822ECD8FFFE
SSDEEP 12288:H9lIZoE0OrRvgBRWasky51qviizQBODAKylkm5ZUxXrc5Zh5ZG5Ze:Hsf0GaR3y5kRzAKcjY8poA
IMP 1A740E3BCF1A45F07A6AE843AF8719BA
PESHA1 A9D4B43D871BFD060F7D0DDC45B707D4AB9E4EA5
PE256 CA5BA35DC6E5AEB7786E3DC677348623FEB3DAF27F6474F4373F946D34E71474

Runtime Data

Window Title:

Windows Mobility Center

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\duser.dll.mui File
(R-D) C:\Windows\System32\en-US\mblctr.exe.mui File
(R-D) C:\Windows\SystemResources\imageres.dll.mun File
(R-D) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_cb612d02732b0fd9\comctl32.dll.mui File
(RW-) C:\Users\user File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_en-us_cb612d02732b0fd9 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.685_none_faeca4db76168538 File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme1175649999 Section
\Windows\Theme601709542 Section

Loaded Modules:

Path
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\mblctr.exe
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\SHLWAPI.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MBLCTR.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Copyright (C) Microsoft. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/3baa1dc0756ebb0c2c70a31be7147863d8d8ba056c1aa7f979307f8790d1ff69/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\mblctr.exe 63
C:\WINDOWS\system32\mblctr.exe 68
C:\WINDOWS\system32\mblctr.exe 65
C:\Windows\system32\mblctr.exe 68

MIT License. Copyright (c) 2020-2021 Strontic.