wersvc.dll

  • File Path: C:\Windows\system32\wersvc.dll
  • Description: Windows Error Reporting Service

Hashes

Type Hash
MD5 8E76D090D17B91E870E4D91E397CBF91
SHA1 26882274EF1BF01A681A9440306AB14705441D61
SHA256 EB41FA89B33BA72C9ADC21FD44CA3A8306C610B9F9F1940C2463B234AD8729D5
SHA384 085755A552E523515C8AB3A78A4B5BF91EBDD4F83F60D3F81EFECE6B72C3989345834BBFB997FF450C25C78DEB42194E
SHA512 01669EB7A336D780A9EC0404020CD53062AFCF81AA3516B6CC4DECDF3B07607D1F4D51445F5538A214B19AD0DD7589F90141A5892EFB28C837D975181FDA45A5
SSDEEP 6144:UrE0YgPcQQWcGxJAwn8TLcb4lueHdImZKD2Tch5tvc:UQ0YgPcvYWwn8fT0e9Rq51c
IMP 8EA7BBB362F807FD5F04D89335411E9E
PESHA1 9B086222911F0B183EC451A987B510CE2924A5D7
PE256 0EFC9F269BE27110CE42D3189E6C20E82D7700C5D27EC6EE466EE6C582E1782C

DLL Exports:

Function Name Ordinal Type
SvchostPushServiceGlobals 2 Exported Function
ServiceMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wersvc
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/eb41fa89b33ba72c9adc21fd44ca3a8306c610b9f9f1940c2463b234ad8729d5/detection/

MIT License. Copyright (c) 2020-2021 Strontic.