DeviceCredential.dll

  • File Path: C:\Windows\SysWOW64\DeviceCredential.dll
  • Description: Microsoft Companion Authenticator Client

Hashes

Type Hash
MD5 0CC883819ECE2E93363E9A5F3B88942E
SHA1 571DE160592EFD630EF5254929AB6CC5AC248FE3
SHA256 F3A0985C822B07236764BB3BDD1D6B8DDD11910942970A1ED5AC52AD39C76ACC
SHA384 1F8DC76572EA8526C31CE56428CD70FBCD8AF00BAD944911D597C9D28FDA77F4657CBB21A8D77924F48E33FEA92FB583
SHA512 9C2280E2DB8CCF2E9F1E9F1A6C1AE32CFF2BC829B8321E2DA103EEB79FE5CD48609EB923D070E7141E7C422AAD0DD82EA0B09ABD7676302E4757F358FE52C1FA
SSDEEP 768:4scg0OzgclaXrnG7qMEu773cllo85Iuoqbdb54PP/t7b:4scmgclMrG7qMEc3cv/No054X/tn
IMP 55C15A4596A5A0F4B5F8DA95504B9259
PESHA1 5AF351062A42BF7F78A3B1C7885A3A90E2CA0B58
PE256 55740ADAD90C395C333D8F3AD361EB35D51024868FC7514C6DB00FF0225C67B5

DLL Exports:

Function Name Ordinal Type
DeviceCredentialMgrUnprotectData 21 Exported Function
DeviceCredentialMgrUpdateAuthenticationStage 22 Exported Function
DeviceCredentialRegisterPresenceMonitoring 23 Exported Function
DeviceCredentialMgrProtectData 20 Exported Function
DeviceCredentialMgrCheckProvisionedDevice 17 Exported Function
DeviceCredentialMgrGetAuthenticationData 18 Exported Function
DeviceCredentialMgrHasLogonSession 19 Exported Function
DeviceCredentialRegisterPresenceMonitoringOnExistingDevice 24 Exported Function
DeviceCredentialUnregisterPresenceMonitoring 29 Exported Function
DeviceCredentialUpdateDeploymentData 30 Exported Function
DeviceCredentialUpdatePresenceState 31 Exported Function
DeviceCredentialShowNotificationMessage 28 Exported Function
DeviceCredentialScanDeploymentData 25 Exported Function
DeviceCredentialSetFriendlyName 26 Exported Function
DeviceCredentialSetOpaqueBlob 27 Exported Function
DeviceCredentialMgrCheckPresence 16 Exported Function
DeviceCredentialDeprovision 5 Exported Function
DeviceCredentialFindClose 6 Exported Function
DeviceCredentialFindFirst 7 Exported Function
DeviceCredentialCompleteProvisioning 4 Exported Function
DeviceCredentialAbortAuthentication 1 Exported Function
DeviceCredentialAbortProvisioning 2 Exported Function
DeviceCredentialCompleteAuthentication 3 Exported Function
DeviceCredentialFindNext 8 Exported Function
DeviceCredentialInitializeProvisioning 13 Exported Function
DeviceCredentialMgrBeginAuthentication 14 Exported Function
DeviceCredentialMgrCheckIfUserSessionIsRequired 15 Exported Function
DeviceCredentialInitializeAuthentication 12 Exported Function
DeviceCredentialFreeBuffer 9 Exported Function
DeviceCredentialGetAuthStageData 10 Exported Function
DeviceCredentialGetDeviceInfo 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DeviceCredential.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/f3a0985c822b07236764bb3bdd1d6b8ddd11910942970a1ed5ac52ad39c76acc/detection/

MIT License. Copyright (c) 2020 Strontic.