bcd.dll

  • File Path: C:\Windows\SysWOW64\bcd.dll
  • Description: BCD DLL

Hashes

Type Hash
MD5 B279088B76A88F9333AD351DD5F7B3F9
SHA1 641D566B32D91FE81A88782D7EDE03550A41650A
SHA256 2B0EA5025716135FE0D8C9CD00B34AFDA4FE4FD21E43C4E047D316A9505CEA78
SHA384 E8E7F7BA4848E67C0CB3E72829BB324D6294A8F1B184EF7227003C6F2D437D8ED3B3560B759562750F3C0A0FB41EA0F9
SHA512 32AE3E66691E783AC1EBE85E353084C11FFBE25C327BD28F9812B1A53B76E2ED55C8200FC0A206DA577A08A5CC59AB100C06AD6F14E1180FA4D4BDD035C29AF2
SSDEEP 1536:FguqOA8VMdjHAk3lpJUDh+QHII7ZNh4KZYnMXFFTO4350obaCPVX:Gu5A8VMRHt3L4h+QoI5PynMXLZuCNX
IMP DF5B05AE22CDEBBEAA8E3C66CC5E87BD
PESHA1 D90D34F762074648408FFD13AEB95B662A3EE950
PE256 DCAE8EE836C5A35CE5B4859B454F89A616203CAE132B8162D4AB22BF0D710FB4

DLL Exports:

Function Name Ordinal Type
GUID_WINDOWS_MEMORY_TESTER 49 Exported Function
GUID_WINDOWS_OS_TARGET_TEMPLATE_EFI 50 Exported Function
GUID_WINDOWS_BOOTMGR 47 Exported Function
GUID_WINDOWS_LEGACY_NTLDR 48 Exported Function
GUID_WINDOWS_OS_TARGET_TEMPLATE_PCAT 51 Exported Function
GUID_WINDOWS_SETUP_EFI 54 Exported Function
GUID_WINDOWS_SETUP_PCAT 55 Exported Function
GUID_WINDOWS_RESUME_TARGET_TEMPLATE_EFI 52 Exported Function
GUID_WINDOWS_RESUME_TARGET_TEMPLATE_PCAT 53 Exported Function
GUID_DEFAULT_BOOT_ENTRY 40 Exported Function
GUID_EMS_SETTINGS_GROUP 41 Exported Function
GUID_CURRENT_BOOT_ENTRY 38 Exported Function
GUID_DEBUGGER_SETTINGS_GROUP 39 Exported Function
GUID_FIRMWARE_BOOTMGR 42 Exported Function
GUID_KERNEL_DEBUGGER_SETTINGS_GROUP 45 Exported Function
GUID_RESUME_LOADER_SETTINGS_GROUP 46 Exported Function
GUID_GLOBAL_SETTINGS_GROUP 43 Exported Function
GUID_HYPERVISOR_SETTINGS_GROUP 44 Exported Function
SyspartDirectGetSystemDisk 67 Exported Function
SyspartDirectGetSystemPartition 68 Exported Function
PARTITION_SPACES_GUID 65 Exported Function
PARTITION_SYSTEM_GUID 66 Exported Function
SyspartDirectSetSystemDevice 69 Exported Function
SyspartGetSystemPartition 72 Exported Function
SyspartIsSpace 73 Exported Function
SyspartGetPhysicalPartitions 70 Exported Function
SyspartGetSystemDisk 71 Exported Function
PARTITION_CLUSTER_GUID 58 Exported Function
PARTITION_ENTRY_UNUSED_GUID 59 Exported Function
GUID_WINDOWS_SETUP_RAMDISK_OPTIONS 56 Exported Function
PARTITION_BASIC_DATA_GUID 57 Exported Function
PARTITION_LDM_DATA_GUID 60 Exported Function
PARTITION_MSFT_RESERVED_GUID 63 Exported Function
PARTITION_MSFT_SNAPSHOT_GUID 64 Exported Function
PARTITION_LDM_METADATA_GUID 61 Exported Function
PARTITION_MSFT_RECOVERY_GUID 62 Exported Function
GUID_BOOT_LOADER_SETTINGS_GROUP 37 Exported Function
BcdEnumerateAndUnpackElements 12 Exported Function
BcdEnumerateElements 14 Exported Function
BcdDeleteObjectReferences 10 Exported Function
BcdDeleteSystemStore 11 Exported Function
BcdEnumerateElementsWithFlags 15 Exported Function
BcdExportStore 17 Exported Function
BcdFlushStore 18 Exported Function
BcdEnumerateElementTypes 13 Exported Function
BcdEnumerateObjects 16 Exported Function
BcdCopyObject 3 Exported Function
BcdCopyObjectEx 4 Exported Function
BcdCloseObject 1 Exported Function
BcdCloseStore 2 Exported Function
BcdCopyObjects 5 Exported Function
BcdDeleteElement 8 Exported Function
BcdDeleteObject 9 Exported Function
BcdCreateObject 6 Exported Function
BcdCreateStore 7 Exported Function
BcdOpenSystemStore 30 Exported Function
BcdQueryObject 31 Exported Function
BcdOpenStore 28 Exported Function
BcdOpenStoreFromFile 29 Exported Function
BcdSetElementData 32 Exported Function
BcdSetSystemStoreDevice 35 Exported Function
GUID_BAD_MEMORY_GROUP 36 Exported Function
BcdSetElementDataWithFlags 33 Exported Function
BcdSetLogging 34 Exported Function
BcdGetElementDataWithFlags 21 Exported Function
BcdGetSystemStorePath 22 Exported Function
BcdForciblyUnloadStore 19 Exported Function
BcdGetElementData 20 Exported Function
BcdImportStore 23 Exported Function
BcdMigrateObjectElementValues 26 Exported Function
BcdOpenObject 27 Exported Function
BcdImportStoreWithFlags 24 Exported Function
BcdMarkAsSystemStore 25 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: bcd.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/65
  • VirusTotal Link: https://www.virustotal.com/gui/file/2b0ea5025716135fe0d8c9cd00b34afda4fe4fd21e43c4e047d316a9505cea78/detection/

MIT License. Copyright (c) 2020 Strontic.