dcomcnfg.exe

  • File Path: C:\Windows\SysWOW64\dcomcnfg.exe
  • Description: COM+

Hashes

Type Hash
MD5 CF23005187F904FC2B510E52B4EF5DD9
SHA1 60DCF414B53F61D8B3483303E607246C999EA16B
SHA256 A122AF3090368A1C1AEC1B56F66858AEF6979367A512E01A6E4F6F56A7204926
SHA384 7CB286CBF9C962EF98B24CC002B6F47188E21242E4A5A7CB5DC00D1C275CD0A16A072784BFD74C084756E387BA310A2A
SHA512 598009F5862F5B99488770ACDDDA32A9EEC42E47BECFBEA3674C2A7224F62D9946ED73142BB65AB061049CD617147EC27E2318AD3B6D1C1DC1D4CD72301024DF
SSDEEP 96:Ojxj2cfOg0OE4NnEp2iyIRo2yI3nc4d/UDGjA2HtEY2wjtoVcJDP2LVD7KkBKEWX:wxjdO4NGJRoi355nEYljtoVcMf1W0EW
IMP 09DC7C84FC3FF557D19CADF0EA6EB40E
PESHA1 0A9ED9CD5991D3F7F5E0FFE671719E422F37CDF5
PE256 A1FC8D6F32757FC3DF9F7BE8F08EFA727824B00EC5A319D05F5E10994772AAE4

Runtime Data

Child Processes:

mmc.exe

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\dcomcnfg.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DCOMCNFG.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 2001.12.10941.16384 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/a122af3090368a1c1aec1b56f66858aef6979367a512e01a6e4f6f56a7204926/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\dcomcnfg.exe 54
C:\windows\SysWOW64\dcomcnfg.exe 36

MIT License. Copyright (c) 2020-2021 Strontic.