EhStorPwdMgr.dll

  • File Path: C:\Windows\SysWOW64\EhStorPwdMgr.dll
  • Description: Microsoft Enhanced Storage Password Manager

Hashes

Type Hash
MD5 D536E2E1AA8A4E1BE55D0B235590E17D
SHA1 8EE0BE4418229A25060129B85E100C12CA3EF3C7
SHA256 033988D5D1E21D816B76265DF77CCE6EECEED315A34FB7D31AEAB1422FB80B12
SHA384 E404189C504AD68A621925636CF9EFA277EFB9E7A4B2C0AAF8A5B0FDDF5C247EA6280EABAF2723BF91DFE79E45CA004A
SHA512 5DC3902B0B61122FA7DD37D3B247CC8C6562D3820C7B81C0C197EF8CEEF06055E9586DC26A22C895CD5DA6F9BBC3402F6A6A1905386DA3EC250E2865F42D4F7F
SSDEEP 1536:i1q2PfJeku1Ec08QeomgPHA5kG9mQ7N6wMkNaAYG5n8sQk:YQv1EWQxPxQZDFcZIZ
IMP 4CE182E10092CA2B961FAD68B0B54599
PESHA1 2540462E97938A8036BE480AE5C8BD4173DAA107
PE256 048D9F6FBB5D6C980A65B404B45308C4AC40FABE7919D0587426EB69C16E57C6

DLL Exports:

Function Name Ordinal Type
EnhancedStoragePasswordInitDisk 1 Exported Function
EnhancedStoragePasswordConfig 3 Exported Function
DllMain 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EhStorPwdMgr.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/033988d5d1e21d816b76265df77cce6eeceed315a34fb7d31aeab1422fb80b12/detection/

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\EhStorAuthn.exe 47
C:\windows\system32\EhStorAuthn.exe 60
C:\Windows\system32\EhStorAuthn.exe 55
C:\Windows\system32\EhStorAuthn.exe 52
C:\Windows\system32\EhStorAuthn.exe 54
C:\WINDOWS\system32\EhStorAuthn.exe 46
C:\Windows\system32\EhStorPwdMgr.dll 63
C:\Windows\SysWOW64\EhStorAuthn.exe 61
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 63
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 60
C:\Windows\SysWOW64\EhStorAuthn.exe 68
C:\Windows\SysWOW64\EhStorAuthn.exe 66

MIT License. Copyright (c) 2020-2021 Strontic.