ncbservice.dll

  • File Path: C:\Windows\system32\ncbservice.dll
  • Description: Network Connection Broker

Hashes

Type Hash
MD5 DC740DB836CFBFD26CE55A26E75CB4E2
SHA1 B2DA1BF0251A7B05544F8DBAD46239BB5835CE0D
SHA256 22C428721738803A32AD7FE86DC5E4A4902C45CA17084F6DF3F62FB50CF137AA
SHA384 C75EFB0D9B853FDB579F87F5670629ECD30C11633CA9F91638C95FF6A5E30F6BF2E604B3584B36E6C627544D8F221A3F
SHA512 B91D7FFA52EA2F2AB10E19E4A165D908C6BE1264967548FACD595E7ECBF026B347C933C201E0C1FC95EA4E0B2438FF05FBE7E9A86583ABC150C77EFA227D313C
SSDEEP 6144:R1/RqK2RISi5WEJ5IPFQ+1O0XW1EeN851jonNojiJ:R1/LSiWPFQolG1E71jMoG
IMP 978A27CBDD122244893E9AA556A87CB4
PESHA1 2570C7349DA58EC8FC4D4DF15953B118AAEE0380
PE256 6192882F68B8116FF2199784DF771780B5C6F05BE904D6B321A199BA0FED3421

DLL Exports:

Function Name Ordinal Type
SvchostPushServiceGlobals 2 Exported Function
ServiceMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ncbservice.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/22c428721738803a32ad7fe86dc5e4a4902c45ca17084f6df3f62fb50cf137aa/detection/

MIT License. Copyright (c) 2020-2021 Strontic.