WinOpcIrmProtector.dll

  • File Path: C:\Windows\system32\WinOpcIrmProtector.dll
  • Description: Windows Office file format IRM Protector

Hashes

Type Hash
MD5 E87013E4DEB985BE7AEAAC491DAB5C5F
SHA1 29631FBBAD0203D12F2D0F5B2F959CECD7F96E6F
SHA256 04249BF3A7774410D3579B1C63F6B1ECAB70EFF2713C969121CF86E2987F1903
SHA384 10B96D7B2E6D9D91659EBB563797550232D68698B5FDD0574BA4C4644B12DF2A5530380850131D20C8812480B1E474F7
SHA512 0F181FCAC31A69E999B563943FD4AC705C71A9F2D7AECD1EED7C152A541D0524A88B9C9F6064882D10251FFC06C51C7F3E7F3CA8FB5248B3497A53D77EE5C8A8
SSDEEP 1536:ARBawYUx0+LG2MeA+iyxzrw3b/9wZqP+6O2GsObBnQCXkBZLqAuG:ARBawYUxdNMHdyxzrw3blw0P+6OdsObi
IMP F44635C14C6F5E19B66E4D9CFC4086CD
PESHA1 DB5E1CAB2EC71DCC7B14A86791F626BDBB1B7F5F
PE256 544A24236667F381C2B5C17B3153D8875958367D4739915A8F2C654E6F4897BF

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WinOpcIrmProtector.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/04249bf3a7774410d3579b1c63f6b1ecab70eff2713c969121cf86e2987f1903/detection/

MIT License. Copyright (c) 2020 Strontic.