IpNatHlpClient.dll

  • File Path: C:\Windows\system32\IpNatHlpClient.dll
  • Description: IP NAT Helper Client

Hashes

Type Hash
MD5 BD695D535CCD2D3A8469D91995B4CBDD
SHA1 AD54820F0677DE27EE5441E3B0A03EFA27F9BAFA
SHA256 47B510DDAD57AD30B1FAD2F7A5450886260156260D82AECED1565B41ED1D5552
SHA384 7A2A165545EFB0250BC89A3F2C109EEFF2CAE61011C25692406E97B2517EEF85838A96D94157E529C6E484798AEAD9F3
SHA512 7C8C00725BD3ED6301E7FD7D2E0089487EE265B036B09D4CE5D8C9BE84A5CC3FE758FA9E429A1E1A836ADEC8DC10C1945D63ED1D7FDC84FF90D049622102212B
SSDEEP 768:xz4HgAUniGnSTc0gnnusgTlttuN6bbbW8EPt0NboiO8VfD8G:NJniGYdgnotuN6y903
IMP 95929F74471AC076AA0AD5E3E20AB0C9
PESHA1 D350E6AC3781EADAA362CE85A8801223CD8659B0
PE256 C6F344D359BD88776E78CD2A063FBA28291681A46210BA667C756A3260751FEC

DLL Exports:

Function Name Ordinal Type
V2IpNatHlpStartDhcpServer 12 Exported Function
V2IpNatHlpStartDnsServer 13 Exported Function
V2IpNatHlpEnumDhcpState 10 Exported Function
V2IpNatHlpEnumDnsState 11 Exported Function
V2IpNatHlpStopDnsServer 16 Exported Function
V2IpNatHlpStopSharingInternalPrefix 17 Exported Function
V2IpNatHlpStartSharingInternalPrefix 14 Exported Function
V2IpNatHlpStopDhcpServer 15 Exported Function
V2IpNatHlpDeleteStaticMapping 9 Exported Function
IpNatHlpStartDhcpServer 3 Exported Function
IpNatHlpStartSharing 4 Exported Function
IpNatHlpFree 1 Exported Function
IpNatHlpGetConnectedDevices 2 Exported Function
IpNatHlpUpdateSharingSettingsFromStorage 7 Exported Function
V2IpNatHlpCreateStaticMapping 8 Exported Function
IpNatHlpStopDhcpServer 5 Exported Function
IpNatHlpStopSharing 6 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: IpNatHlpClient.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/47b510ddad57ad30b1fad2f7a5450886260156260d82aeced1565b41ed1d5552/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\IpNatHlpClient.dll 46

MIT License. Copyright (c) 2020 Strontic.