api-ms-win-crt-process-l1-1-0.dll

  • File Path: C:\Program Files (x86)\Microsoft Office\root\Client\api-ms-win-crt-process-l1-1-0.dll
  • Description: ApiSet Stub DLL

Hashes

Type Hash
MD5 8F8A47617DFD829A63E3EC4AFF2718D9
SHA1 1D7DC26BB9C78C4499514FB3529B3478AECF7340
SHA256 6D4A1AAD695A3451C2D3F564C7CC8D37192CD35539874DF6AE55E24847E51784
SHA384 586EA5FAD21E3CD964E4AEB587F48A21B2A32C6D29B5F51B331AFD362A386CFF7AC59DF354A1251F5EDD8377DDEAD91E
SHA512 D3B96B1F80C20DE58A4D4179177E1C1C2B460719968FBA42E1BA694D890342AAAB5A8C67E7FFDD126B2FC6D6A7B2408952279D8926B14BF2DF11740483867821
SSDEEP 192:pYTRQqjd7NWVghW/RmgbXH9YOCAs/nGfe4pBjSf1wjWNArXVWQ4mW4C0zA7qnajP:2KcW2hW5mgbCA0GftpBjLKlvQyURz8x
PESHA1 8D3D7C9F1190685FFFA8943DDAE4434C6C229118
PE256 FEAC1BA8CACD60105399814A484AE65BB60055A9A6822B23B00D2E8F3934F73D

DLL Exports:

Function Name Ordinal Type
_wexecv 25 Exported Function
_wexeclpe 24 Exported Function
_wexecvp 27 Exported Function
_wexecve 26 Exported Function
_wexeclp 23 Exported Function
_unloaddll 20 Exported Function
_spawnvpe 19 Exported Function
_wexecle 22 Exported Function
_wexecl 21 Exported Function
_wspawnve 34 Exported Function
_wspawnv 33 Exported Function
_wspawnvpe 36 Exported Function
_wspawnvp 35 Exported Function
_wspawnlpe 32 Exported Function
_wspawnl 29 Exported Function
_wexecvpe 28 Exported Function
_wspawnlp 31 Exported Function
_wspawnle 30 Exported Function
_execv 7 Exported Function
_execlpe 6 Exported Function
_execvp 9 Exported Function
_execve 8 Exported Function
_execlp 5 Exported Function
_cwait 2 Exported Function
_beep 1 Exported Function
_execle 4 Exported Function
_execl 3 Exported Function
_spawnv 16 Exported Function
_spawnlpe 15 Exported Function
_spawnvp 18 Exported Function
_spawnve 17 Exported Function
_spawnlp 14 Exported Function
_loaddll 11 Exported Function
_execvpe 10 Exported Function
_spawnle 13 Exported Function
_spawnl 12 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000010A2C79AED7797BA6AC00010000010A
  • Thumbprint: 3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
  • Issuer: CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: apisetstub
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.10240.16384 (th1.150709-1700)
  • Product Version: 10.0.10240.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/6d4a1aad695a3451c2d3f564c7cc8d37192cd35539874df6ae55e24847e51784/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\agcp.exe 43
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework.NETFramework\v4.8\Microsoft.VisualC.dll 36
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\Microsoft.Azure.KeyVault.Core.dll 47
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\Microsoft.WindowsAzure.Configuration.dll 35
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\Microsoft.Azure.KeyVault.Core.dll 47
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\Microsoft.WindowsAzure.Configuration.dll 35
C:\Program Files\Microsoft Silverlight\5.1.50918.0\agcp.exe 36
C:\WINDOWS\system32\microsoft.windows.softwarelogo.showdesktop.exe 30
C:\Windows\system32\mrt_map.dll 24
C:\Windows\system32\mrt100.dll 24
C:\WINDOWS\system32\TsWpfWrp.exe 29
C:\Windows\system32\TsWpfWrp.exe 27
C:\Windows\SysWOW64\mrt_map.dll 29
C:\Windows\SysWOW64\mrt100.dll 30
C:\WINDOWS\SysWOW64\TsWpfWrp.exe 32
C:\Windows\SysWOW64\TsWpfWrp.exe 29

MIT License. Copyright (c) 2020-2021 Strontic.