DesktopShellAppStateContract.dll

  • File Path: C:\Windows\system32\DesktopShellAppStateContract.dll
  • Description: Desktop Switcher Data Model

Hashes

Type Hash
MD5 03AFBFB826303CAE5F15E1FCBE281DF2
SHA1 00257FDC2E239CE6DBDE75ADE353C1F205AC44FD
SHA256 33CF85F8EBF434A4216A84A8A3CF649A78B823C2EC72508311FB9898B5A72A98
SHA384 1BCFA1FFEFA63562F3384DB6927824D8C1A1EC79340CE83BD9686164662DC624E92D6E5ED345F0F66D8F7266F9576CAF
SHA512 1666963F575250BE366C4FD216B9A99E6ABEA419C34A4707AC08F7E436E70EE05C2F07271E1BE049C5A9ECA0BE94E961445E7FA558385DBC61A12809818F29C5
SSDEEP 768:YDLU2/Hj7Gzo4mZHX73tPvVVxj2bo2B4ir4jVGDHMWgTFquLQCVGk6:VUtBvhybo+h4wDsWgJquLvVGX
IMP 06588FBA549C3DC94382BEA1BAE0CA6F
PESHA1 28D64A9DC21ED89A9A07635EC3729FB519EA269F
PE256 0F695885BCC233CCD468C981598315F311795B9E549A1AC0DBC739D8C868AEAC

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 3 Exported Function
DllGetActivationFactory 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DesktopSwitcherDataModel.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/33cf85f8ebf434a4216a84a8a3cf649a78b823c2ec72508311fb9898b5a72a98/detection/

MIT License. Copyright (c) 2020 Strontic.