WaaSMedicPS.dll

  • File Path: C:\Windows\system32\WaaSMedicPS.dll
  • Description: WaaS Medic Proxy Stub library

Hashes

Type Hash
MD5 A1FAB207957EC73760B03B893DD855BA
SHA1 CEA7BBF723134F500602C726889C8361C119CD53
SHA256 FA9DBCED96A5AE2F16CDDEF4568C79001481410CE483D88457C9627E0AA98CA4
SHA384 1AFB2DDC318095831714F519245AC7E2FB0CD079A8ED068DB63B958B7575A8E7334A198A598CA98CD07136DB01552AD5
SHA512 18AD3C4561BD76EEEF5DBEC53913AB1AAAB3CE5B3D69B98A647A3F536D6E256C9A7871417169AC4D62D9F0AA99C2368DEB8923A9555916AC93D6AC040440CE18
SSDEEP 384:ltNkhQ4gIRUgSIs+hcNSiupHvUjqiA/H5eg/zsYp5sW7IWz2xnvYEL9W:ln+RxSPNSajG/HNsYp5BMS
IMP 72ACD637B91576300A288509AF2C460D
PESHA1 D842BE2337AF7EFB8ECB62654F9A99793F95B6DB
PE256 D579E2DFF64B53D254DCAE674C4413D8CADF216B568285CB286E5741FC10CA34

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WaaSMedicPS.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.450 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.450
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/fa9dbced96a5ae2f16cddef4568c79001481410ce483d88457c9627e0aa98ca4/detection/

MIT License. Copyright (c) 2020 Strontic.