ExecModelClient.dll

  • File Path: C:\Windows\SysWOW64\ExecModelClient.dll
  • Description: ExecModelClient

Hashes

Type Hash
MD5 D3C87CBC6B39B1FB874EA2DA16F221C0
SHA1 0711A171B9A20A111BCE8A4E8E8D0AAC6F8D2475
SHA256 52F9655BEA03CAD0B0BB64CD19ECD8BEB5DB1023D0C8A85063CF76207C1725C7
SHA384 E5413FAFEC263AA8451DC7D5F659F730B938998D8573E11D4B682431F247843FAF533ED40F586FA1F14DCDC1E0CC998E
SHA512 CCD74A2DB0575391FF5E56CCCA6F36BBB62173639E5D5B1402A1054B6CBB12029B1E2CC1400A30162D75C0695439E9889D2AA5C3C5BFC7221B6527FD0572F6A5
SSDEEP 3072:X6f42PrVuuf1zwwmINpbzO5Tplo3SSo2p6wdwlcMw2k+vBSHK68SbXhDKnecsHok:GuuJ3VVOT2p6wdwlZlBue6DKnZo
IMP BED461CC4B5260CCB13532C2146BB6C1
PESHA1 FB9E76295B8839DD2DF600A821BE12DFFC2F0CD5
PE256 833F6913AC769B78039CEC0AA61BC117873123562F3F69B824DEE99479543224

DLL Exports:

Function Name Ordinal Type
DllGetActivationFactory 5 Exported Function
DllGetClassObject 6 Exported Function
TestHook_CancelShutdown 2 Exported Function
CreateForegroundTaskManager 1 Exported Function
CreateModernVoipPolicy 3 Exported Function
DllCanUnloadNow 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ExecModelClient.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.264 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.264
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/52f9655bea03cad0b0bb64cd19ecd8beb5db1023d0c8a85063cf76207c1725c7/detection/

MIT License. Copyright (c) 2020 Strontic.