dpapiprovider.dll

  • File Path: C:\Windows\system32\dpapiprovider.dll
  • Description: dpapiprovider DLL

Hashes

Type Hash
MD5 6E7AB57794703368AA2ED931F2E36724
SHA1 0FC83236C09F1B38522000474289F341C728FFDA
SHA256 913F334844531267651683C6E1ABA47442FAEFFAC6F6246DB65A7ACE7ABE3841
SHA384 BF092148C60C3813DA6945CA2DE7B8452EAFBABE1C582AFD225A39EDD55C4BF63E880A80DA5C0022DCE5EA620A076100
SHA512 A781C397ADEA749387A1D1C1BFE5BE03EF4A38974C1B37C8B9354C47DD448F61808841BCEFEF1CBD3FBC7EED5BB002293DECC0C5A37985B12CDA83C6E9E622D7
SSDEEP 1536:7OvLG/lta34QD7iSuLYLw3XuVN19H9JbZ5ddlqP1:7IwnMviSuLYLu+7f9JFPq
IMP BFD66556C91EC641138905B0FE0A25F0
PESHA1 46A9C9101C26E33DF18058E3AA1FBB66B93597CF
PE256 C1206CBC0C6713449C796EB69A4C41FC961C844843DD3A88495B253DC3CB6042

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: dpapiprovider.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/913f334844531267651683c6e1aba47442faeffac6f6246db65a7ace7abe3841/detection/

MIT License. Copyright (c) 2020-2021 Strontic.