EhStorPwdMgr.dll

  • File Path: C:\Windows\system32\EhStorPwdMgr.dll
  • Description: Microsoft Enhanced Storage Password Manager

Hashes

Type Hash
MD5 4FA3A4A9F8077A1877FBAB012EA4054F
SHA1 675D7F759254D05383F576A624F103684FA0014C
SHA256 A7596D91EBDC71572A6F0922F2F3E2EA35826EA2B255D515C1E491DD459F0A47
SHA384 EBC27E670E25FCC15CF5ED1FE3ED1E8583247330F5B2FF68F2D3BB305F7E6A6850FE7FB3A405B7A012619910A30455B5
SHA512 7C06758DB28845B48AF202749D16F20A078ED1C198C99C9D1C2DE4FD0352DB50A79002224855D682F726F85668C456D75D942A387961EA65467CEB70AF60D1FD
SSDEEP 1536:UcXEXaSTwuLGb+4hXK9KyQeomgPHA5kG9mQ7N6wMkNaAYG5n8s:UOTuLGbly5QxPxQZDFcZIZ
IMP 3324DFAAD44D25A2930B4C46A53735AC
PESHA1 1A384FFB3F54918CBF00DFB2155CDAFAD6338A1F
PE256 F2EDE832A32D937E6D6E9E75D175F909C5ABCE85F17E7DD0BFBB62981C8A4D26

DLL Exports:

Function Name Ordinal Type
EnhancedStoragePasswordInitDisk 1 Exported Function
EnhancedStoragePasswordConfig 3 Exported Function
DllMain 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EhStorPwdMgr.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/a7596d91ebdc71572a6f0922f2f3e2ea35826ea2b255d515c1e491dd459f0a47/detection/

File Similarity (ssdeep match)

File Score
C:\windows\system32\EhStorAuthn.exe 58
C:\Windows\system32\EhStorAuthn.exe 60
C:\Windows\system32\EhStorAuthn.exe 54
C:\Windows\system32\EhStorAuthn.exe 49
C:\WINDOWS\system32\EhStorAuthn.exe 54
C:\Windows\SysWOW64\EhStorAuthn.exe 61
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 65
C:\Windows\SysWOW64\EhStorAuthn.exe 66
C:\Windows\SysWOW64\EhStorAuthn.exe 60
C:\Windows\SysWOW64\EhStorPwdMgr.dll 63

MIT License. Copyright (c) 2020 Strontic.