ddp_ps.dll

  • File Path: C:\Windows\system32\ddp_ps.dll
  • Description: Microsoft Data Deduplication Service proxy/stub

Hashes

Type Hash
MD5 886B7D665F5753A982261E663A6285E8
SHA1 1F1BA446DBFE9DC1478990C8599617D82F76FC76
SHA256 FD815FBA4626A31BB32537B8D6EB101D1FD64C3FF7B119D8C0DA3231BCEA6878
SHA384 CB3227322F654CA88D829CC36E0C588EBD736BEADA22A6A0A0D938D418E06B6AB33BE06A288E9FD3F62E3C8494275AA5
SHA512 61FAF8DDBCB99DB905EF28C6058DE0513142E86B76D67D2E5280E5FA68E7D398BD09FA09517D04E8B0E1C6671ACFF644460ECF8A61948D12DAC1AFF26B394F73
SSDEEP 768:98eos4nLVY1eD9hUWJzyz+TVcGdXlEkdThmr91VEFPE4Y3u8CU:9h4nLVYAzySdlthmTVEFs4Y3n
IMP A589ABD7EE3DC7AB8386F229B4612413
PESHA1 B3360F0A958FA4D759BAD3ECD37F67C9A8499D57
PE256 014C97A6ED934E2AE74B289011CA940D15D9E10AF7D3AA166F8FB02AF807F28B

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DDP_PS.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/fd815fba4626a31bb32537b8d6eb101d1fd64c3ff7b119d8c0da3231bcea6878/detection/

MIT License. Copyright (c) 2020-2021 Strontic.