mce.dll

  • File Path: C:\Program Files\Windows Defender Advanced Threat Protection\Classification\mce.dll
  • Description: Classification Engine Implementation
  • Comments: Service Pack 20

Hashes

Type Hash
MD5 EF5988A4C2CEECCFE5A6F08DF12BBAF0
SHA1 C7FC1AAE1ADC2BE8284CFE6EE8B35E876500FCBC
SHA256 037C39BA917CA326FB6296C3BB981A6083BF3DF1695889D60548E899BE4E3AC0
SHA384 B8927260967BFA94078348309FE8BDF1C337FDD7256D131D5C2EDD0794F04B945A8479D3B90D1C830AD7BC4215970A24
SHA512 C31807C8894FA35976FA63EAA181ACDBA1205CFD94932DB95165AC208821B5333D19DE7A617423F1FBF4D86030E59D2DAA9C91B983FD98D1D4504465EDDF34D8
SSDEEP 49152:pxKQ9TNqT2wJ/F+cxxlseeB1FWAX3csV7xIwg4yINrhCV:pxKQ9TITZhmrHcs4
IMP FE000FBDEE29639BB68C45CC2D64C246
PESHA1 E90FCC8D2044E2B2900ECA68BB25179E3CD09C2D
PE256 992C1B8C14FB84BE8AD9BB3A711BE4AD94F86136491D2DA8931853A5C7A391BA

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DllInstall 3 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Mce.DLL
  • Product Name: Microsoft Exchange
  • Company Name: Microsoft Corporation
  • File Version: 15.20.1622.000
  • Product Version: 15.20.1622.000
  • Language: English (United States)
  • Legal Copyright: 2014 Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/037c39ba917ca326fb6296c3bb981a6083bf3df1695889d60548e899be4e3ac0/detection/

MIT License. Copyright (c) 2020-2021 Strontic.