NPSM.dll

  • File Path: C:\Windows\system32\NPSM.dll
  • Description: NPSM

Hashes

Type Hash
MD5 953E8F333EFE2F6A98CECA7E15B5AA3A
SHA1 AFAA9CBACC381855BBC7A2CDBB05681414C7A6DA
SHA256 D6AB3CC0F4D4BCB29EB6AC8AB2E4C7A9E3DE39838A3565BA848B494BFBCBD90E
SHA384 F7866458D963D9B68B617491D0F881DF512BFB5A11B24017C9A60D43309EA94A0D5A2F99DF6684CD3B7EA95A891882FD
SHA512 AA9F9A93521498CFF89CEDC8538B3A2D577D66536797D8A2E213020F434EF459EE0D645F5249897BCEEFB29F7CCE2FC1657966619468C8079451C486F3A695BF
SSDEEP 3072:9Gl96mPrPJR70xhNpn8KyspklPbfIWCeFWHRtDJJ+1+EfaTskUfmNLWNY:El9VDJR70xhNp8KysqTMeFav+2UmBW
IMP 4004C0A0BB2B5158CF0F1819716BE35F
PESHA1 23B624AE78FF5DB61A0CA13C40165D01AF6210C6
PE256 93AA104421183B38854D40E7AE4E051334F6F71ED0045459016B14D59FACACD3

DLL Exports:

Function Name Ordinal Type
ServiceMain 6 Exported Function
SvchostPushServiceGlobals 7 Exported Function
UnregisterNowPlayingSessionManagerFactory 2 Exported Function
RegisterNowPlayingSessionManagerFactory 1 Exported Function
DllCanUnloadNow 3 Exported Function
DllGetActivationFactory 4 Exported Function
DllGetClassObject 5 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NPSM.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.329 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.329
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/d6ab3cc0f4d4bcb29eb6ac8ab2e4c7a9e3de39838a3565ba848b494bfbcbd90e/detection/

MIT License. Copyright (c) 2020 Strontic.