OneBackupHandler.dll

  • File Path: C:\Windows\system32\OneBackupHandler.dll
  • Description: Backup & Restore Handlers Implementation

Hashes

Type Hash
MD5 FAAB016BA7EF40AF31061A429A01A600
SHA1 C833AC5D90E6C1E5EAE4EDAAC9041A9D6387EF25
SHA256 461070628E52559202967830825D8FB7DCA47A1AFFD8748E7BE82698910A3E10
SHA384 177C1F2F72E96F38CB01735704BDDCC9D14D93BE2A1CF627B93B98085BD3B4AEDC399BF43A544108633ECE0B231BE8AB
SHA512 8C3BB598C10051E0D5437EFA56BEF37C3CC9C54FDE395D48ED2A4E6B19B805662B4EF5561CA8576BBF0871C8ED1BD403C4E1B5F4393A8576FD3D7AB157186724
SSDEEP 6144:x0ctq4SlmrQb7cwd+DUhPoyEkjS7hR6ZSvdjqgvoM5R4dDzfi0GpHMnH0Q:i94+b8XBR6ZSwgvm9uHsH0Q
IMP 7E786FF09F8FD0C7CA1396F687A54236
PESHA1 BF5700786560250E86FD79BECE4EBFD5D0F4BA34
PE256 718C4C37F2F7CF7199930B4055C2E4F9B3A7A8CE2F6C3158C43217C2B2380B5F

DLL Exports:

Function Name Ordinal Type
GetSetting 3 Exported Function
DllGetActivationFactory 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: OneBackupHandler.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/461070628e52559202967830825d8fb7dca47a1affd8748e7be82698910a3e10/detection/

MIT License. Copyright (c) 2020-2021 Strontic.