ComposableShellProxyStub.dll

  • File Path: C:\Windows\system32\ComposableShellProxyStub.dll
  • Description: Composable Shell Shared Proxy Stub

Hashes

Type Hash
MD5 0B9D510215C90B8E5BCDCBB9F3141E14
SHA1 67763AE83126935814CAED5D5FED5C078074522A
SHA256 DF58FB153C649791754821CF9E3B98DA0F42A710BEC7522D3D0795F806B013C2
SHA384 E2817AA58F5B2BF5B3AC4A5FF71077E7BAB43B06F33B1DDFBA52A9DB9CEEC9B1DE374CAE7EAC59496C2CE67D1C6FE6F8
SHA512 466C7F0DDE4087A539D507DF7FB94C090A873359B3E883E98DB15A70969A9C7A0CC20F84CE478D3C8BD14E8AB42CAB2838ADE061EBC93B826A69353E2A9F4025
SSDEEP 6144:tJ2YrQb9EPYFQXOSmfQKJZgCRpY26pNW4C:Q1
IMP 0DAC7F008687B19AF89719CF35F82BE8
PESHA1 8221238B1115F9936A2FB789A7F8D365261DB676
PE256 4A25CF45ED5BFB5A4DA7BB9C948C9858761406B6865B2A40DAE2194F30365D7E

DLL Exports:

Function Name Ordinal Type
GetProxyDllInfo 3 Exported Function
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ComposableShellProxyStub.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/df58fb153c649791754821cf9e3b98da0f42a710bec7522d3d0795f806b013c2/detection/

MIT License. Copyright (c) 2020 Strontic.