WinMsoIrmProtector.dll
- File Path:
C:\Windows\system32\WinMsoIrmProtector.dll
- Description: Windows Office file format IRM Protector
Hashes
Type |
Hash |
MD5 |
90061D0AA214DD3A3852E8161F8F6D48 |
SHA1 |
AC4122D0EB7E6E3A13E0B3D3B63864E89E016E7B |
SHA256 |
E93993D70C265AEBC403673AD4012859B0E416579D0DEAE28BA1C687EFB4E17E |
SHA384 |
C78F538F38C8820A143C785F5D0C6E27B11FA113C5649B930603066056DAB42214B56ABB58866D8BBF6BBFB3A8D072B3 |
SHA512 |
3F14BD53D69710611C4C73EC811F66EEBAE73D254380DF5AA926861BBDD0DAEAFDAF5CD0D4757DD72F8E0C98FFB4950E1AD2188C3506FCE2154A53C376092EE8 |
SSDEEP |
1536:tbIyFUwlLLZaJWimoalzNS1aWp8+fOTwr/cnkEbQ+AuG:tblUGIAVoCzNScWp8+fOcgnX8 |
IMP |
5CA8C00138C16B571EC0D96535C6B914 |
PESHA1 |
6929FE4F98804CCD14C120DA9E977644AF5B3FB7 |
PE256 |
65643DCB33783093D73028BD108D7A9E6488557A075502C384CF7666D5B0191C |
DLL Exports:
Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: WinMsoIrmProtector.DLL
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/e93993d70c265aebc403673ad4012859b0e416579d0deae28ba1c687efb4e17e/detection/
MIT License. Copyright (c) 2020-2021 Strontic.