pcacli.dll

  • File Path: C:\Windows\SysWOW64\pcacli.dll
  • Description: Program Compatibility Assistant Client Module

Hashes

Type Hash
MD5 E2F734540289592F7635E9D24FEA4FCA
SHA1 53BC35A4660887CA338AAD766E86ECDB694FE44A
SHA256 AF8BBB55A11F502B71D9D75F862A301901371A021C1C63F6073D384A28B83B7D
SHA384 A3891DC6A4ECCA7F68A2C41ED97D241A02F9515B9E332E3FB789E3513D6BDBBDB0B1F1A96C7868703680C0746D6EFE05
SHA512 163CF73930BFCDF9CBF4CF0E892DD313256CD200F5223E6C9A70607009B714F9BB00530CD44FF38CF5FD8CCF94EE32784694EB6F2A0A104FB75DF1649412D338
SSDEEP 1536:3Tx55D1keqVAwQDYCe7U6Xw/7xGoVANS:3TxiArYT7i/soVAA
IMP C15D07D99F5FE2C8D8AA8626F5C38D83
PESHA1 05504BE73561AB2E83228CDA32A127913C81FE93
PE256 0D239DD3221A5D26E9D97439A7FF43AFD859F722F7A43139FE4F33021D25FA62

DLL Exports:

Function Name Ordinal Type
PcaNotifyMsiInstall 5 Exported Function
PcaMonitorProcess2 8 Exported Function
PcaSendToService 7 Exported Function
PcaNotifyStatusIcon 6 Exported Function
PcaIsPcaDisabled 2 Exported Function
PcaGetFileInfoFromPath 1 Exported Function
PcaMonitorProcess 4 Exported Function
PcaLinkChildProcessToParent 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename:
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.423 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.423
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/af8bbb55a11f502b71d9d75f862a301901371a021c1c63f6073d384a28b83b7d/detection/

MIT License. Copyright (c) 2020-2021 Strontic.