qwave.dll
- File Path:
C:\Windows\SysWOW64\qwave.dll
- Description: Windows NT
Hashes
| Type |
Hash |
| MD5 |
8D1CFCB9C7CF3602E8C42C17B5F3CC56 |
| SHA1 |
7DD05297CCC787CF3AC92C2C9EFA66921C3A58D4 |
| SHA256 |
8C2BF904DF889CB7A5879E2CC5BA08A11F57CB7DD3938F4B2BE4CC8974A051F4 |
| SHA384 |
D3FDF76DB84E8B7D931731ADFD90D63C96913AED76DABDA46130DD0BFF12E4A319C326E11BAB31234DD66DC00A81F456 |
| SHA512 |
C96678F6DDDFAE367367D47277C0760026C3B53F7BAA924779B48BD92761FCC5B6903864D7F4D03624E1730654C7548D132F113BACC53D71EAA2555E50FC7482 |
| SSDEEP |
6144:yoOdADW/I7Itq3PrvsLyYQUi9L02uSu+e/znAInXGJ9IaPnfqZ0Tn:yoOmD9IwbsLtQQ7P9ySqTn |
| IMP |
C17BFB3A99C6546462E5CEA5FC5BB874 |
| PESHA1 |
65FEA3B2B8E706ADC033329FF188ED09A77D0FFB |
| PE256 |
AB0325303533221DFF7F0F009405AA0501DFB17B3DF406B7321D0674CBE690F2 |
DLL Exports:
| Function Name |
Ordinal |
Type |
QOSRemoveSocketFromFlow |
10 |
Exported Function |
QOSQueryFlow |
9 |
Exported Function |
QOSNotifyFlow |
8 |
Exported Function |
QOSSetFlow |
11 |
Exported Function |
ServiceMain |
14 |
Exported Function |
QOSStopTrackingClient |
13 |
Exported Function |
QOSStartTrackingClient |
12 |
Exported Function |
QOSAddSocketToFlow |
3 |
Exported Function |
QDLHStartDiagnosingPath |
2 |
Exported Function |
QDLHPathDiagnostics |
1 |
Exported Function |
QOSCancel |
4 |
Exported Function |
QOSEnumerateFlows |
7 |
Exported Function |
QOSCreateHandle |
6 |
Exported Function |
QOSCloseHandle |
5 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: qwave.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/8c2bf904df889cb7a5879e2cc5ba08a11f57cb7dd3938f4b2be4cc8974a051f4/detection/
MIT License. Copyright (c) 2020-2021 Strontic.