wecsvc.dll
- File Path:
C:\Windows\system32\wecsvc.dll
- Description: Event Collector Service
Hashes
| Type |
Hash |
| MD5 |
C2F1D4628C22E298F3A3A06B6DC97588 |
| SHA1 |
E25CBE16C54B05D749EC13B5BF5A9B3948C344E5 |
| SHA256 |
F8CF9237AC6B5B90D9D0B71C9EEAEB3C1E1CFF3362A9C0A2DEB5B14180254155 |
| SHA384 |
611D6998568F72578E15A6C037FD97F643C67F3598F9F3461CE40A95B348AB315F8DE8059253378EAA21C3A6E55D72E1 |
| SHA512 |
399D1D15F0174F80DF6F3DA9B0C032B4BC57D2A3342393CAF9414D6BE86CAABFF2CD9EB7D69B0F8B6F4F852B2413A872155E7E6422DA231DA07F7E8AAFE28718 |
| SSDEEP |
3072:IRFM/6/0/c5UdCFvFn/VfGhHEeDtxG2DtljmTmK+2YdzJobulJ0xJS:IO6/gMF9/VfGhHEo2UlC3H4JD30x |
| IMP |
1E247A6179832A28D40642C11738E3C4 |
| PESHA1 |
CE76F508C4BF387F3B8F7F5C045C348168D7A66E |
| PE256 |
07F42100583CE244FD88B611F32150E0D28551D7787553E9AC1A73CA3A8CC7DC |
DLL Exports:
| Function Name |
Ordinal |
Type |
ServiceMain |
1 |
Exported Function |
SvchostPushServiceGlobals |
2 |
Exported Function |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: wecsvc.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/f8cf9237ac6b5b90d9d0b71c9eeaeb3c1e1cff3362a9c0a2deb5b14180254155/detection/
MIT License. Copyright (c) 2020-2021 Strontic.