WinMsoIrmProtector.dll

  • File Path: C:\Windows\SysWOW64\WinMsoIrmProtector.dll
  • Description: Windows Office file format IRM Protector

Hashes

Type Hash
MD5 21FFB56DE49386B38FA3A649A55A5568
SHA1 2470C03EA31EC08FE3412A37119F0DD4F31A8AC8
SHA256 7D9A84E15AA0E405976DEA0DF921C4F222A523C7308A250DF3F2734E22AFB509
SHA384 2D52EB82E6D3FEE617DE6EB7CE51A719D4CC422CE3837E562FA877145B4AE2FA275D8E77E2E6D473C8FC53F2B4D5DF13
SHA512 756431ED36E15CE1A44362276B78143E7BFAEEB50F3931B60A2F0CF79F0FFE1D555B69B23EFD46C982B3A7AC44E7B1B449E9705EB23E9FA34DAE08A609F55315
SSDEEP 1536:z/o9lByY1W9bTEbXKbq4qEIF5b88+vOjNa96dEBoAums2:bo9aY1W9bvtIng8+vOxY6CBI2
IMP 59A0F6C3D5976835A6DBD52C4F977293
PESHA1 FD254B881A8E9D7C1FCA88E88976D89C0134D137
PE256 340631EC1DBEDF003811B6351FE3ADC79C1452DA6C55C0990ACB365474AA2A8C

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WinMsoIrmProtector.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/7d9a84e15aa0e405976dea0df921c4f222a523c7308a250df3f2734e22afb509/detection/

MIT License. Copyright (c) 2020 Strontic.