home

wevtapi.dll

Eventing Consumption and Configuration API

Microsoft Corporation

It is installed with the Windows 8 pre-release build (RTM).
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Eventing Consumption and Configuration API

 
Part of the Windows 8.1 (Blue) Operating System

Version:
6.3.9600.16384 (winblue_rtm.130821-1623)

MD5:
f6f7f145eba01d1d33ecc00c6be4d39b

SHA-1:
cabf6dc4c5ef3b16ecc3ac2a0668e674bb97fe9f

SHA-256:
585a379be7bdb4a356d669d1dbd5c5ed4d83e1a74b87d960ec586c9ef4ef3483

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/27/2024 8:04:03 AM UTC  (today)

File size:
301.6 KB (308,848 bytes)

Product version:
6.3.9600.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wevtapi.dll.mui

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\windows\syswow64\wevtapi.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/18/2013 5:43:38 AM

Valid to:
9/18/2014 5:43:38 AM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000002418FC0B689E7399D0000000000024

File PE Metadata
Compilation timestamp:
8/22/2013 10:51:18 AM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
6144:joAGDfIezgLqv2sDytX777h0Lb5w7dQuh5TNaia4+bB:UAGkezg9R7p0/5w7OuDpaT4+t

Entry address:
0x1117

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 0F, 84, 33, 35, 00, 00, 5D, 90, 90, 90, 90, 90, 6A, 2C, 68, 10, 12, 00, 10, E8, 1E, FF, FF, FF, C7, 45, E4, 01, 00, 00, 00, 33, F6, 89, 75, FC, 8B, 45, 0C, 83, F8, 01, 0F, 86, 03, 02, 00, 00, 83, 7D, 0C, 00, 0F, 84, DF, 05, 00, 00, 8B, 45, 0C, 83, F8, 01, 74, 05, 83, F8, 02, 75, 34, A1, 44, 30, 04, 10, 85, C0, 0F, 85, E1, 5E, 01, 00, 83, 7D, E4, 00, 74, 7A, C7, 45, FC, 02, 00, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 25, FF, FF, FF, 89, 45, E4, 89, 75, FC, 83, 7D...
 
[+]

Entropy:
6.4198

Code size:
259 KB (265,216 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.