NcaSvc.dll

  • File Path: C:\Windows\system32\NcaSvc.dll
  • Description: Microsoft Network Connectivity Assistant Service

Hashes

Type Hash
MD5 D47A20839608B8213065D7AFC8C42195
SHA1 95884E843C5112B14EB135E6211B95562AC1BDCD
SHA256 7B0187BE9705ED2F925616C13B3744BAC0A9C96B21BE503D96BC9EE7EE125B33
SHA384 1264C901368189B7F920B312069181B2993351E8124A1A27A6C8BC23D1B372994CF4527513BFA68CE4B178EF756921A7
SHA512 D81A52FC42DE51D39C4F4B5A0B1142097C6D5344D64F28C0545B69E9D572ED820F7EA1719E6728A32249A5C367E4E8F0FF50E0BABFC9B5F5A891F883D9235E5A
SSDEEP 3072:G9su277Z+lzolaKKMqQpSlWn6UWJ5TPohJBmM6l:IKozoy6pSsWaJBmMs
IMP BE040105DEF20E0C8F67A8A06BF21B12
PESHA1 B21C596941986D7ED2E2F08CA83B5DAE3FD6AD3D
PE256 915B0C7E31AEC13264546916EF923A35A1734101497CCDC57F420F8BE7DC4A27

DLL Exports:

Function Name Ordinal Type
SvchostPushServiceGlobals 2 Exported Function
ServiceMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NcaSvc.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/65
  • VirusTotal Link: https://www.virustotal.com/gui/file/7b0187be9705ed2f925616c13b3744bac0a9c96b21be503d96bc9ee7ee125b33/detection/

MIT License. Copyright (c) 2020-2021 Strontic.