api-ms-win-core-file-l1-1-0.dll

  • File Path: C:\Program Files (x86)\Cisco Systems\Cisco Jabber\api-ms-win-core-file-l1-1-0.dll
  • Description: ApiSet Stub DLL

Hashes

Type Hash
MD5 6B937FE1EFF0E440B124BBB9334DF34D
SHA1 AB3982AB9D46BAA67B1D59728BC6E93C45872B2B
SHA256 71C87C14BC1BD0B20D9F68D4943E93C4C6DDC1B6CF252938BB15FE562552F93E
SHA384 02C701BDAF5B678740164F70A37AB2FFD0486970D5146DB204DD1779681BF117482240FBD2943BCE89E266045E5A8E1C
SHA512 13D58EACBAC1D97F780BDF87A29CEEA047F6AC1002C6D79FC661FE7AA759C654BA14842D840887B41C48A15E06ED8358FC1A7E124DD6123D2145F1254364B82F
SSDEEP 384:bCPvVXXWlhWJMIA0GftpBjcxg6NlfgfzF:bCPvVXCrqiyxgD5
IMP n/a
PESHA1 690E1C65909031C582DF39CECA5F2F4DA6ACC564
PE256 9615840B091338DDD3C915A0BE278BE08B8B728D99F4373C61E4F8A3EB5DA7AB

DLL Exports:

Function Name Ordinal Type
GetTempFileNameW 50 Exported Function
GetVolumeInformationByHandleW 51 Exported Function
GetLongPathNameW 48 Exported Function
GetShortPathNameW 49 Exported Function
GetVolumeInformationW 52 Exported Function
LockFile 55 Exported Function
LockFileEx 56 Exported Function
GetVolumePathNameW 53 Exported Function
LocalFileTimeToFileTime 54 Exported Function
GetFinalPathNameByHandleA 41 Exported Function
GetFinalPathNameByHandleW 42 Exported Function
GetFileTime 39 Exported Function
GetFileType 40 Exported Function
GetFullPathNameA 43 Exported Function
GetLogicalDriveStringsW 45 Exported Function
GetLongPathNameA 47 Exported Function
GetFullPathNameW 44 Exported Function
GetLogicalDrives 46 Exported Function
QueryDosDeviceW 57 Exported Function
SetFileTime 69 Exported Function
SetFileValidData 70 Exported Function
SetFilePointer 67 Exported Function
SetFilePointerEx 68 Exported Function
UnlockFile 71 Exported Function
WriteFileEx 74 Exported Function
WriteFileGather 75 Exported Function
UnlockFileEx 72 Exported Function
WriteFile 73 Exported Function
ReadFileScatter 60 Exported Function
RemoveDirectoryA 61 Exported Function
ReadFile 58 Exported Function
ReadFileEx 59 Exported Function
RemoveDirectoryW 62 Exported Function
SetFileAttributesW 65 Exported Function
SetFileInformationByHandle 66 Exported Function
SetEndOfFile 63 Exported Function
SetFileAttributesA 64 Exported Function
GetFileSizeEx 38 Exported Function
FindCloseChangeNotification 12 Exported Function
FindFirstChangeNotificationA 13 Exported Function
FileTimeToLocalFileTime 10 Exported Function
FindClose 11 Exported Function
FindFirstChangeNotificationW 14 Exported Function
FindFirstFileExW 17 Exported Function
FindFirstFileW 18 Exported Function
FindFirstFileA 15 Exported Function
FindFirstFileExA 16 Exported Function
CreateDirectoryW 3 Exported Function
CreateFileA 4 Exported Function
CompareFileTime 1 Exported Function
CreateDirectoryA 2 Exported Function
CreateFileW 5 Exported Function
DeleteFileW 8 Exported Function
DeleteVolumeMountPointW 9 Exported Function
DefineDosDeviceW 6 Exported Function
DeleteFileA 7 Exported Function
FindFirstVolumeW 19 Exported Function
GetDriveTypeW 31 Exported Function
GetFileAttributesA 32 Exported Function
GetDiskFreeSpaceW 29 Exported Function
GetDriveTypeA 30 Exported Function
GetFileAttributesExA 33 Exported Function
GetFileInformationByHandle 36 Exported Function
GetFileSize 37 Exported Function
GetFileAttributesExW 34 Exported Function
GetFileAttributesW 35 Exported Function
FindNextFileW 22 Exported Function
FindNextVolumeW 23 Exported Function
FindNextChangeNotification 20 Exported Function
FindNextFileA 21 Exported Function
FindVolumeClose 24 Exported Function
GetDiskFreeSpaceExA 27 Exported Function
GetDiskFreeSpaceExW 28 Exported Function
FlushFileBuffers 25 Exported Function
GetDiskFreeSpaceA 26 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000010A2C79AED7797BA6AC00010000010A
  • Thumbprint: 3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
  • Issuer: CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: apisetstub
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.33 (rs1_release_sec.160727-1952)
  • Product Version: 10.0.14393.33
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/71c87c14bc1bd0b20d9f68d4943e93c4c6ddc1b6cf252938bb15fe562552f93e/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\agcp.exe 38
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework.NETFramework\v4.8\Microsoft.VisualC.dll 33
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\Microsoft.Azure.KeyVault.Core.dll 40
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\Microsoft.WindowsAzure.Configuration.dll 32
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\Microsoft.Azure.KeyVault.Core.dll 40
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\Microsoft.WindowsAzure.Configuration.dll 32
C:\Program Files\Microsoft Silverlight\5.1.50918.0\agcp.exe 38
C:\WINDOWS\system32\microsoft.windows.softwarelogo.showdesktop.exe 36
C:\Windows\system32\mrt_map.dll 25
C:\Windows\system32\mrt100.dll 36
C:\WINDOWS\system32\TsWpfWrp.exe 35
C:\Windows\system32\TsWpfWrp.exe 35
C:\Windows\SysWOW64\mrt_map.dll 35
C:\Windows\SysWOW64\mrt100.dll 30
C:\WINDOWS\SysWOW64\TsWpfWrp.exe 35
C:\Windows\SysWOW64\TsWpfWrp.exe 30

MIT License. Copyright (c) 2020 Strontic.