AarSvc.dll

  • File Path: C:\Windows\SysWOW64\AarSvc.dll
  • Description: Agent Activation Runtime Service

Hashes

Type Hash
MD5 95AC233A9E97CC7B162D42DD56F23C4D
SHA1 A53178BD80DB212C499E1CCB4EAA6A5015536ABE
SHA256 95F094C004586A74859F4399738C75A4B6764B22D83F6CA363AE430AF30A97CA
SHA384 C58872E354E33ECEB21CFC4D4EC29C3DF8E233790860E6D85126BF672266713C308274A32AC7B699C6504E8F7604F02F
SHA512 24153912EA4B87A3388D623C720C9F2EAB57F51648A70733040507BF6D062C8C433D5D88D3097B7932EB11779E0D0CBABF21A38B20DFD8C0D768CD8D9C0C6FCB
SSDEEP 6144:b6fqVX8xlAlLz8dG17fMlIqE2LOHXZ7CnZFy41hjvAT:bCk86Lz8A4lIqE2O7Cn6yrE
IMP 43DEE253C42D8C5CC6291435AAC5FED2
PESHA1 A50C09BD296EF6F785672BBF358B27C84401A16E
PE256 4126465EA42F61E5E3D2F5733BDEF7035831BAF93080D457AE87A1712E0C62AC

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 3 Exported Function
ServiceMain 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetActivationFactory 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AarSvc.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.423 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.423
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/95f094c004586a74859f4399738c75a4b6764b22d83f6ca363ae430af30a97ca/detection/

MIT License. Copyright (c) 2020 Strontic.