NcaApi.dll

  • File Path: C:\Windows\system32\NcaApi.dll
  • Description: Microsoft Network Connectivity Assistant API

Hashes

Type Hash
MD5 364263384C326187A30B5BC01185FEAF
SHA1 DCD9CFEF354A584F61EA8F90DFF666DD80B3423E
SHA256 BDD46A136CF6A8E090836A3EC445062D0B5E25496F2E92B576C92B0B13CF3827
SHA384 42E37D392A080D5F327395EFA3FDBABFFC1F964D195D519EAE1BEA6CDAFE7266CA381A6B1AE09CB58E8742EB9B12DB11
SHA512 A17D8F55A3928E889F6FFAFF6C7F147612714EA188F1F896082BC1E310932CC123394FB3C77453C1635F3B8D6053623ED1C8D0E217EB87624C6DCABFDC823767
SSDEEP 384:SsXIh3fp7lnzm4klME1HndKCGRb3gMJFMO1qa3sW7b1WF:Chv2F1HdKPtFMOb
IMP 2E4B626BFCC4585F71FA8C79A540843B
PESHA1 5E55F22F52A4B134D625CB2A723EFE2EAF2042D3
PE256 208C95CC3E6F5F938F207A3DD6CEA072DC0FAE6CBDB522F88133715CFBA166CB

DLL Exports:

Function Name Ordinal Type
NcaNetworkOpen 7 Exported Function
NcaNetworkClose 6 Exported Function
NcaStatusEventSubscribe 8 Exported Function
NcaToggleNamePreferenceState 10 Exported Function
NcaStatusEventUnsubscribe 9 Exported Function
NcaGetEvidenceCollectorResult 5 Exported Function
NcaEngineClose 1 Exported Function
DllMain 11 Exported Function
NcaEngineOpen 2 Exported Function
NcaGetConfig 4 Exported Function
NcaExecuteAndCaptureLogs 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NcaApi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/bdd46a136cf6a8e090836a3ec445062d0b5e25496f2e92b576c92b0b13cf3827/detection/

MIT License. Copyright (c) 2020 Strontic.