ExecModelClient.dll

  • File Path: C:\Windows\system32\ExecModelClient.dll
  • Description: ExecModelClient

Hashes

Type Hash
MD5 9A99D3246A0F5875D0A8A4C3EB0CE019
SHA1 19B73A272DA7D5F5C31666B559B093D4E8142002
SHA256 D564CC3B11F692C958CEBE0706B3C3532B48F5DE4D61F17BE264F8F9D74CA197
SHA384 30E8F0C9DB4E7541744728B583DAEF8C2710C085DF72FC81380FE70CDF69EE0C6F2BFED3FEED7980F76337A16D253964
SHA512 EA5F2A1A780463F1A22AFBA2B0E112DE83A2563AEED4CEF51EA8976F0E5AB45476D4BF97087CE0E074B796B82DF0C5FE9EE9AC0A9C528CA94534232DE913A249
SSDEEP 6144:kAHn1fQLOW4JV+QWfRuxJ1V/MTC9op2yDdz52sVMG+SpI0rI:kAHn1fQLOWXQWfRW1V/MTC9op2pu60
IMP 28D6DC2A59D03A8A156D19BAF5D0D471
PESHA1 0F01EE4DBDB1349E0D60E5A4C49F10FF98152065
PE256 DE1B720C8C4007999DCF5D6CC23B4EC2895AC9A454AB40459846335F86F0700C

DLL Exports:

Function Name Ordinal Type
DllGetActivationFactory 5 Exported Function
DllGetClassObject 6 Exported Function
TestHook_CancelShutdown 2 Exported Function
CreateForegroundTaskManager 1 Exported Function
CreateModernVoipPolicy 3 Exported Function
DllCanUnloadNow 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ExecModelClient.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/d564cc3b11f692c958cebe0706b3c3532b48f5de4d61f17be264f8f9d74ca197/detection/

MIT License. Copyright (c) 2020 Strontic.