mobsync.exe

  • File Path: C:\WINDOWS\system32\mobsync.exe
  • Description: Microsoft Sync Center

Hashes

Type Hash
MD5 7A014229A67E48D5B6AAEF7A94BEE665
SHA1 6B39BC4C68A55408EB326FCB8B59277B9EC00ABC
SHA256 CC2316416CD1C8BA5C88241552AE70034EC7FEA26BF95EBE11067891DAD9EAC5
SHA384 BB838E6E33558515D0EEBF553DA67412DC489E5F23FC8E68C6389E41A60122195413277429C15D6F61766CAD052224BA
SHA512 33E36A96FB27AD4346E53DCC825F8D991765D341D6445A35B94F5251B35AC9E1105C9786B54CE9CFB9563408D7B5E624B493347E1B78FA62090D976F1046A408
SSDEEP 1536:eoFDetFoV13GfpClYpW4mB7Z3mlGPoCGVjGWmt8CXZ+63x+w4JD+0NL+fK:euHVQpfe9WlGPo9St8WHxSD+09+S
IMP F247D587E13B170D2246BD033539DBFB
PESHA1 81AD7FEEE856801B6D281CC1B7607951233441EC
PE256 AEA2B015F2A492C36D58F59118102236E3F6D6A0A49F2925ECBFF3A5C1D2B76D

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\mobsync.exe
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mobsync.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/cc2316416cd1c8ba5c88241552ae70034ec7fea26bf95ebe11067891dad9eac5/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\mobsync.exe 69
C:\Windows\system32\mobsync.exe 65
C:\WINDOWS\system32\mobsync.exe 71
C:\Windows\system32\mobsync.exe 72
C:\WINDOWS\SysWOW64\mobsync.exe 72
C:\WINDOWS\SysWOW64\mobsync.exe 71
C:\Windows\SysWOW64\mobsync.exe 74
C:\Windows\SysWOW64\mobsync.exe 71
C:\Windows\SysWOW64\mobsync.exe 68

MIT License. Copyright (c) 2020-2021 Strontic.