CoreShellAPI.dll
- File Path:
C:\Windows\SysWOW64\CoreShellAPI.dll
- Description: CoreShellAPI
Hashes
Type |
Hash |
MD5 |
95AB49082695AD31BF25F01832F87EE2 |
SHA1 |
2704328A2AFDB2A072FE1921F0E5ACDF5D1D01A3 |
SHA256 |
E811B5904EF2DFA6ED4E0CA5B55BAA730CB161A2983FEE0685272B27B4439B64 |
SHA384 |
ABD09F98422E23C351007F5D56EE27E590A47C387A5509BF37DB7A08BCE837CF1EF488ECF429313976B4D5211007B7CB |
SHA512 |
DC3298C7F24CEA0124AF2AB4FF825EA769F1D92696E0D1F24C859F9E2E104DC6BBE57EB322688AE1163D4A6ADACA47A97920D2FA7EA3C255901117A8BEA67329 |
SSDEEP |
3072:qzESTdWDAJWmsRIi3TKIfWsv75Ud4KLhFFtBinw1+v9Jr1WdBuMNu85u3wX8lzKg:cdTdms6WsvUl3p1+f4Du3pN/aC5LVP |
IMP |
774B3934AF674DDB8730C461B786CDFC |
PESHA1 |
F2F1A9554BF3B203AC9703B98DB799FAB1F7793F |
PE256 |
6FD7A3F337D2BCEAB8FC5C7F581D0923FE626B0AA60B05C41057F10F91DEC068 |
DLL Exports:
Function Name |
Ordinal |
Type |
DllGetClassObject |
3 |
Exported Function |
DllGetActivationFactory |
2 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: CoreShellAPI.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.388 (WinBuild.160101.0800)
- Product Version: 10.0.19041.388
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/e811b5904ef2dfa6ed4e0ca5b55baa730cb161a2983fee0685272b27b4439b64/detection/
MIT License. Copyright (c) 2020-2021 Strontic.