- File Path:
C:\Windows\SysWOW64\ExtrasXmlParser.dll
- Description: Extras XML parser used to extract extension information from XML
Hashes
| Type |
Hash |
| MD5 |
6998860F56BE3889D8DA24BBFC82A2B8 |
| SHA1 |
607E5C184788DF4EE0E65AC208334C91DD4A3C6B |
| SHA256 |
66061E630A917DDC02B6E4401559B88E05AD50ABEF4E21178F356EA677928063 |
| SHA384 |
83B804A3E999F5E8C33E00D30A04A0473B7E721F51D5EF6715F3DCD6406FC6280F1306861997B681B99A8A6A2FF6273C |
| SHA512 |
F0868D77CC09B05142365496288D555FD11389A985A05D6D3408D24DAAEA1D6A96A871C4120CEC1A347CB98DC7C252D0B1A87D50CD573211D57E0755C3A29D40 |
| SSDEEP |
384:knBH7dYrD3+6XGY1k+KO62+QAil01huQhcdZJqDWRWW:qhYrD3+6XGMkVURdZf |
| IMP |
1DDECC1F1FD39DD668A43DE788070DE1 |
| PESHA1 |
DEEB6B0A8F8B3BB568EFF47A2F8506EC94ECA16F |
| PE256 |
620AE18ADBC140534678B61D7893666A8C3145AAA4F10429332DE7B7F2A6C094 |
DLL Exports:
| Function Name |
Ordinal |
Type |
ParseExtrasXmlForSmsInterceptExtensionInfo |
3 |
Exported Function |
ParseExtrasXmlForNabSyncExtensionInfo |
2 |
Exported Function |
ParseExtrasXmlForExtensionInfo |
1 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: ExtrasXmlParser.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/66061e630a917ddc02b6e4401559b88e05ad50abef4e21178f356ea677928063/detection/
MIT License. Copyright (c) 2020-2021 Strontic.