dcomcnfg.exe

  • File Path: C:\Windows\SysWOW64\dcomcnfg.exe
  • Description: COM+

Hashes

Type Hash
MD5 8D282EDE189E69E0EFE0043144EFA236
SHA1 1BD6D5F4612DDFD977E37ECC2907BCB058322217
SHA256 A5AF51728E1EB3E5D4F7FFA9DEB78E3D7986CB308761D5E5D1A130CD02362F55
SHA384 93C7769E7FED68FD7A0F4E4650FACC1484F670B4F8E0E23E9C08D7396CED4EE71FCF6216B4FA75546BDD7058DB6A303C
SHA512 9CB1AA80A974E935DB144BF355BA6AD8ADEF255603BC464B1349FC01734A2DC944A66A08EFDF8E31B0BE4737C58F685BD773CE012258D3E431F3AFB914946C6F
SSDEEP 96:kiav2cf7gE+EyPBEp2CyIRoiyI9ncnrsDGjAWEt68rtzzfDP2LVD7KkBLEW0EWwb:kFvd7WUZRouRQy68rtzzuf+W0EW
IMP 09DC7C84FC3FF557D19CADF0EA6EB40E
PESHA1 3AF75087469F5A7F18F2170061EC7F7510C0D2E9
PE256 174B7058B7F465010B9D6A999451A94883260D17C389423A6E2C764BE0D2CD4C

Runtime Data

Child Processes:

mmc.exe

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\dcomcnfg.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DCOMCNFG.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 2001.12.10941.16384 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/a5af51728e1eb3e5d4f7ffa9deb78e3d7986cb308761d5e5d1a130cd02362f55/detection

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\dcomcnfg.exe 54
C:\windows\SysWOW64\dcomcnfg.exe 35

MIT License. Copyright (c) 2020-2021 Strontic.