IpNatHlpClient.dll

  • File Path: C:\Windows\SysWOW64\IpNatHlpClient.dll
  • Description: IP NAT Helper Client

Hashes

Type Hash
MD5 5BA9BFF57690B930CB13AC0FE574CE48
SHA1 C47A40E0C17184D30B20CC2EB5787D2C2ED306AA
SHA256 AE08193BB90220A617C2CDBA69A42F48393659E82AB6BA57F642E3082A4F9382
SHA384 782BB00122010E1FC6F128DDD75E007D9A16BAA0F0DCCFECBB9D20E63E3B3FB6E7A9A577BD6AB4931C393437AD9F94D6
SHA512 AF2F4D30FC7FF81B13B8D48B27D3B52C7C2B82EBFA9D197ADE41A7553913737726794E7203406B3647D784BC75160E8991A7500A13D3F75D9189539C657DB7BE
SSDEEP 384:SVVtFCsHcINbxHp+QwjYgbW8EPt0NbIPMFO8Vf0sWAGWEJ8q:SrfNKRbW8EPt0NbhO8Vf0Gc
IMP DEC69ED982D20D49D99DD2E1728CA9F7
PESHA1 BF9F5926F98387AFCD4D790F08F88B2E54CC3031
PE256 35327615AB8C449A0E540D2FBA72A8CD7D501395B780A09680306592FFCE64D8

DLL Exports:

Function Name Ordinal Type
V2IpNatHlpStartDhcpServer 12 Exported Function
V2IpNatHlpStartDnsServer 13 Exported Function
V2IpNatHlpEnumDhcpState 10 Exported Function
V2IpNatHlpEnumDnsState 11 Exported Function
V2IpNatHlpStopDnsServer 16 Exported Function
V2IpNatHlpStopSharingInternalPrefix 17 Exported Function
V2IpNatHlpStartSharingInternalPrefix 14 Exported Function
V2IpNatHlpStopDhcpServer 15 Exported Function
V2IpNatHlpDeleteStaticMapping 9 Exported Function
IpNatHlpStartDhcpServer 3 Exported Function
IpNatHlpStartSharing 4 Exported Function
IpNatHlpFree 1 Exported Function
IpNatHlpGetConnectedDevices 2 Exported Function
IpNatHlpUpdateSharingSettingsFromStorage 7 Exported Function
V2IpNatHlpCreateStaticMapping 8 Exported Function
IpNatHlpStopDhcpServer 5 Exported Function
IpNatHlpStopSharing 6 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: IpNatHlpClient.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/ae08193bb90220a617c2cdba69a42f48393659e82ab6ba57f642e3082a4f9382/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\IpNatHlpClient.dll 46

MIT License. Copyright (c) 2020 Strontic.