windows.internal.shellcommon.TokenBrokerModal.dll

  • File Path: C:\Windows\system32\windows.internal.shellcommon.TokenBrokerModal.dll
  • Description: Token broker default shell contract handler

Hashes

Type Hash
MD5 532345D466C9C641D0B7491152131EF9
SHA1 857CA53D7FDDB94534ABD95440F06F42A470359C
SHA256 53A469A1AF7CCDC47F623622D25CF4B7588C13E26D3D0306318D5EAAE9A560AD
SHA384 44979A385D7B78CD5BB08A4930E690B878D0522B8FF19BEACDE18941422B65A20DADB2F75557CE4B166C393F2D604563
SHA512 11BCCA775D3C8F8C219B0C7608BAFF003589CFA09B9F55CB605BDBA97E03727368E4E50592E9EF7DB335BC7088FBFC51755FD8C26FFE078A872A512B61B3D06C
SSDEEP 1536:ykESFkp44nR6MOhSS3B7A6cZwd2jVrivcp:ykHk7n4Btc2d2j1X
IMP 5AAB28B41ED5A414E4F6D3A6A4E99756
PESHA1 887B96246ACC052FDE64692BD31D6B99F32434EA
PE256 D7DCCC6664A7F67A7BD946500BDFF2B8A7D04D3FDAEE4B30D5945CFBEE2C4D9E

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 3 Exported Function
DllGetActivationFactory 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Windows.Internal.ShellCommon.TokenBrokerModal.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/53a469a1af7ccdc47f623622d25cf4b7588c13e26d3d0306318d5eaae9a560ad/detection/

MIT License. Copyright (c) 2020-2021 Strontic.