winmde.dll

  • File Path: C:\Windows\system32\winmde.dll
  • Description: WinMDE DLL

Hashes

Type Hash
MD5 EA743DB3C7AD06485E98B71E08C23AD0
SHA1 774B720E48F30195945602185EE9E0DD7CD448D5
SHA256 B52CE02D2F0F6F5C9601379ACB1A49BF265BA39F49BA31EE411D806EDDA3B03F
SHA384 B047A189F11E1D27AA3B32DA60283C454604B649BB987464F0FF3033D4D52E1B51BBDD810592BBECE3EE73337A6691C8
SHA512 8C0352E452537405A2A4BCB654DCB8832F24F38C7D5C8BFE958FA1EACCD0BE8CB1E82FC225289658E4FADD5DC6E24517FA059AC37F7B08B7A2C373853444F5B0
SSDEEP 24576:gYek+nKBzBEtkCEZDAZUUJURy/9SLpyzMB/dfdnsJvmUWMcTnW:ngnKBnVZDAZrK5pyzMBdFUWMcjW
IMP 30D9F815F3D0FE0F8F3741C9F2DC893E
PESHA1 FCC272D738E802EF8009B9FFF211F8E6AE94D706
PE256 117E0A7CDE50F9B28C2F33586393D5A6DEEA59BEAE0AC0BFC4486222D7852EB2

DLL Exports:

Function Name Ordinal Type
MFCreateNetVRoot 5 Exported Function
MFCreateWinMDEOpCenter 7 Exported Function
MFCreateWMPMDEOpCenter 6 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function
DllRegisterServer 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: winmde.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/b52ce02d2f0f6f5c9601379acb1a49bf265ba39f49ba31ee411d806edda3b03f/detection/

MIT License. Copyright (c) 2020-2021 Strontic.