cryptngc.dll

• File Path: C:\Windows\system32\cryptngc.dll
• Description: Microsoft Passport API

Hashes

Type	Hash
MD5	E6CE271B28CB12CC56197887D4747BB8
SHA1	7ADEBC4B161B1DA5ECC8CCE1443E3B566501CD41
SHA256	A236E4F6E432DB2EADB3EFB30AF87FBE3F49107957026F12E649B68A52427F58
SHA384	24E222D07D82954992532897326E80CB1E6595E23085BF4851D218318E4921ED2BD35E2885EC84C8A747B5F83A43C4FB
SHA512	13A57B545CC3B5DF323E8B1F51B273C21510C8D0253D1CC2455D0C7A346C811D0CC3B0FA43FA509BB27C88002404787088C02252FF40B9C1CC51E53ECECB2396
SSDEEP	6144:oJhQofICCJdJJoJVVZyXz2RycI+C3mqL63vY9tqRwUShEVJnwn9UBeFMAae9Jd2C:oJgBdJ6JMawcvCiYtqRwgnvlAh9J3k
IMP	D4A1699340B3F6B52AB184D316EA5702
PESHA1	967AD9AD7BAEDCA24319702D1A4144204A283D9E
PE256	9A875635CCAB55F666E92F1D50D8905BF474B0204FEBFC88AE9C5D27C5C3689E

DLL Exports:

Function Name	Ordinal	Type
NgcImportSymmetricPopKey	47	Exported Function
NgcIsAnyContainerInVsm	48	Exported Function
NgcGetUserIdKeyName	45	Exported Function
NgcGetUserIdKeyPublicKey	46	Exported Function
NgcOpenUserIdKey	51	Exported Function
NgcPackAuthBuffer	52	Exported Function
NgcIsPinRemovable	49	Exported Function
NgcNotifyVscProvisioned	50	Exported Function
NgcGetUserIdKeyContainerStatus	44	Exported Function
NgcGetPolicy	38	Exported Function
NgcGetPregenKeyState	39	Exported Function
NgcGetLogonDecryptionKeyNameForFirstLogonAfterUpgradeFromThreshold	36	Exported Function
NgcGetPkcs7ChainBlobFromCertificateBlob	37	Exported Function
NgcGetSymmetricPopKeyTransportKeyName	42	Exported Function
NgcGetUserIdKeyCertificate	43	Exported Function
NgcGetPregenUserKey	40	Exported Function
NgcGetSymmetricPopKeyTransportKey	41	Exported Function
NgcSignWithUserIdKeyEx	64	Exported Function
NgcSignWithUserIdKeySilent	65	Exported Function
NgcSignWithUserIdKey	62	Exported Function
NgcSignWithUserIdKeyAndPadding	63	Exported Function
NgcUnpackPasswordChangeAuthBuffer	68	Exported Function
NgcVerifyWithSymmetricPopKey	69	Exported Function
NgcUnpackAuthBuffer	66	Exported Function
NgcUnpackCredData	67	Exported Function
NgcSignWithSymmetricPopKey	61	Exported Function
NgcQueryEnabled	55	Exported Function
NgcQueryHardwarePolicy	56	Exported Function
NgcPackPasswordChangeAuthBuffer	53	Exported Function
NgcQueryEffectiveCertPolicy	54	Exported Function
NgcRemovePrebootProtector	59	Exported Function
NgcRenewKeyAttestation	60	Exported Function
NgcRemoveBioProtector	57	Exported Function
NgcRemoveCompanionDeviceProtector	58	Exported Function
NgcGetLogonDecryptionKeyName	35	Exported Function
NgcCreateTicketForSmartCardKeyOperation	12	Exported Function
NgcCreateTicketForSmartCardVpn	13	Exported Function
NgcCreateContainer	10	Exported Function
NgcCreateContainerSilent	11	Exported Function
NgcCreateUserIdKeyHandle	16	Exported Function
NgcDecryptWithSymmetricPopKey	17	Exported Function
NgcCreateUserIdKey	14	Exported Function
NgcCreateUserIdKeyEx	15	Exported Function
NgcChangePinSilent	9	Exported Function
FidoSignWithCredential	3	Exported Function
NgcAddBioProtector	4	Exported Function
FidoCreateCredential	1	Exported Function
FidoGetCredential	2	Exported Function
NgcCancelPendingUIRequest	7	Exported Function
NgcChangePin	8	Exported Function
NgcAddCompanionDeviceProtector	5	Exported Function
NgcAddPrebootProtector	6	Exported Function
NgcGetDefaultDecryptionKeyName	29	Exported Function
NgcGetEventInterface	30	Exported Function
NgcEnumUserIdKeys	27	Exported Function
NgcFreeEnumState	28	Exported Function
NgcGetKeyAttestationForUserIdKey2	33	Exported Function
NgcGetKeyImplType	34	Exported Function
NgcGetKeyAttestationForContainerService	31	Exported Function
NgcGetKeyAttestationForUserIdKey	32	Exported Function
NgcEnumContainers	26	Exported Function
NgcDeleteContainer	20	Exported Function
NgcDeleteContainerEx	21	Exported Function
NgcDecryptWithUserIdKey	18	Exported Function
NgcDecryptWithUserIdKeySilent	19	Exported Function
NgcEncryptWithAsymmetricKey	24	Exported Function
NgcEncryptWithSymmetricPopKey	25	Exported Function
NgcDeleteSymmetricPopKeyTransportKey	22	Exported Function
NgcDeleteUserIdKey	23	Exported Function

Signature

• Status: Signature verified.
• Serial: 330000026551AE1BBD005CBFBD000000000265
• Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: cryptngc.dll.mui
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.19041.1 (WinBuild.160101.0800)
• Product Version: 10.0.19041.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 64-bit

File Scan

• VirusTotal Detections: 0/70
• VirusTotal Link: https://www.virustotal.com/gui/file/a236e4f6e432db2eadb3efb30af87fbe3f49107957026f12e649b68a52427f58/detection/

MIT License. Copyright (c) 2020-2021 Strontic.