WinMsoIrmProtector.dll

  • File Path: C:\Windows\system32\WinMsoIrmProtector.dll
  • Description: Windows Office file format IRM Protector

Hashes

Type Hash
MD5 90061D0AA214DD3A3852E8161F8F6D48
SHA1 AC4122D0EB7E6E3A13E0B3D3B63864E89E016E7B
SHA256 E93993D70C265AEBC403673AD4012859B0E416579D0DEAE28BA1C687EFB4E17E
SHA384 C78F538F38C8820A143C785F5D0C6E27B11FA113C5649B930603066056DAB42214B56ABB58866D8BBF6BBFB3A8D072B3
SHA512 3F14BD53D69710611C4C73EC811F66EEBAE73D254380DF5AA926861BBDD0DAEAFDAF5CD0D4757DD72F8E0C98FFB4950E1AD2188C3506FCE2154A53C376092EE8
SSDEEP 1536:tbIyFUwlLLZaJWimoalzNS1aWp8+fOTwr/cnkEbQ+AuG:tblUGIAVoCzNScWp8+fOcgnX8
IMP 5CA8C00138C16B571EC0D96535C6B914
PESHA1 6929FE4F98804CCD14C120DA9E977644AF5B3FB7
PE256 65643DCB33783093D73028BD108D7A9E6488557A075502C384CF7666D5B0191C

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WinMsoIrmProtector.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/e93993d70c265aebc403673ad4012859b0e416579d0deae28ba1c687efb4e17e/detection/

MIT License. Copyright (c) 2020 Strontic.