KnobsCore.dll
  - File Path: 
C:\Windows\system32\KnobsCore.dll 
  - Description: Knobs Core Library
 
Hashes
  
    
      | Type | 
      Hash | 
    
  
  
    
      | MD5 | 
      1287B66D2B22F2852882AF81A3DB9BB0 | 
    
    
      | SHA1 | 
      197ECC9CAF3C6034A8D6EF9CD35735C74FA99055 | 
    
    
      | SHA256 | 
      3FC4FE686E2709827A526F606FE6331D282AEEF02564614901389966D96662CA | 
    
    
      | SHA384 | 
      35B602B18040A26BB6D4F0BE5C6C4D66AE26801AFA53D977E55FD1C5DF35251AF4745334537C000C0E01F79DA909EF36 | 
    
    
      | SHA512 | 
      5696F7C5E7E1DCF4F90704E11338A28BA247480F43C35F46EEFFB9EA29E4C0F395A3E3EB545F7DB06DE9BEC68CE998086822EF40A532765A1D17FB26FB5FC281 | 
    
    
      | SSDEEP | 
      6144:Z5sXGCIvD4f1S/HUJiSbHIS0m9/oIl+1Gji:c1IeUSbIg/oIl+1J | 
    
    
      | IMP | 
      B81D675C568798AD6F0255A60C414021 | 
    
    
      | PESHA1 | 
      7B0255CF60895B72D1D5CF9C3165C93C5729099F | 
    
    
      | PE256 | 
      F40221D7BCCF73607A9C8B0BBAEDAAE0BC7C61DC0EFEF0387705110C4858F75C | 
    
  
DLL Exports:
  
    
      | Function Name | 
      Ordinal | 
      Type | 
    
  
  
    
      DllGetClassObject | 
      3 | 
      Exported Function | 
    
    
      DllGetActivationFactory | 
      2 | 
      Exported Function | 
    
    
      DllCanUnloadNow | 
      1 | 
      Exported Function | 
    
  
Signature
  - Status: Signature verified.
 
  - Serial: 
330000026551AE1BBD005CBFBD000000000265 
  - Thumbprint: 
E168609353F30FF2373157B4EB8CD519D07A2BFF 
  - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
 
  - Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
 
  - Original Filename: KnobsCore.dll
 
  - Product Name: Microsoft Windows Operating System
 
  - Company Name: Microsoft Corporation
 
  - File Version: 10.0.19041.508 (WinBuild.160101.0800)
 
  - Product Version: 10.0.19041.508
 
  - Language: English (United States)
 
  - Legal Copyright:  Microsoft Corporation. All rights reserved.
 
  - Machine Type: 64-bit
 
File Scan
  - VirusTotal Detections: 0/68
 
  - VirusTotal Link: https://www.virustotal.com/gui/file/3fc4fe686e2709827a526f606fe6331d282aeef02564614901389966d96662ca/detection/
 
MIT License. Copyright (c) 2020-2021 Strontic.