DDACLSys.dll

  • File Path: C:\Windows\system32\DDACLSys.dll
  • Description: SysPrep module for Resetting Data Drive ACL

Hashes

Type Hash
MD5 8BD3A2505BA5219B895F39549D943DA6
SHA1 0D1657E09ED2FC9DBD90CFA84636C40DBA56AFBD
SHA256 FD323F73A4D4EFB6C459FC772A0327CA5ED0B52CBFF1A8AC50314D3215743558
SHA384 02DF4B22FA1458F3EC4E1B6F95CC201E2EF064AC46739E7E10C820F000EA6EC51BEE43F93B6C15D0ACA7590A40D90DF6
SHA512 D692E6BE7C7489AA1EA894A3916AD2D705EB7183ED05CA988A28B2E1F518B585B48F827589415DAABDE905FE69095B6742896F060364FC30646A8A071744CEEF
SSDEEP 768:fHD/MrGaVcW9uskKG7rt9wOFkZYuFI1Pr:fHDUrbcW0RBvwOFkZYuSPr
IMP 738644F915AE8FF7ABCF279E96D137B4
PESHA1 BE60C787B7A4D7C0B5B41C20CC6B48D83A0BE619
PE256 CF60C49D7856F474D678A9D06877C15D47D9B63D7187F823FADB2A1BA7A6E345

DLL Exports:

Function Name Ordinal Type
DDACLSys_Specialize 2 Exported Function
DDACLSys_Offline_Specialize 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DDACLSys.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/fd323f73a4d4efb6c459fc772a0327ca5ed0b52cbff1a8ac50314d3215743558/detection/

MIT License. Copyright (c) 2020 Strontic.