drprov.dll
- File Path:
C:\Windows\system32\drprov.dll
- Description: Microsoft Remote Desktop Session Host Server Network Provider
Hashes
Type |
Hash |
MD5 |
AD4E56D96986F1476216E41D5B679CCE |
SHA1 |
DC0EB97F1A0F5CEAC9F8574AB93C0CD7ED2B89B2 |
SHA256 |
9F631DE2B52B461867EB6FC41890487D34B674C43B67C8EB13CA638C3B460A1D |
SHA384 |
CE5B7781B4F00367169EA527A58E3B7DEC3CCEFF7090290D306F34D216CA0F823CFCD6AECDF6E722A5F9E50829090A97 |
SHA512 |
7C43F77988D0CA224AEB2E400D4788E5E0DEC74E6FDFF1EA1276B64EB3A2726ABD0210EF43C138D3FAEC4BE8776B3AAAA2C733A56A29A882161EFB36C65B9B4B |
SSDEEP |
384:0+H9pVlJ5c8AoyP2t+L4lYZNClfJgv0PiITuh4WiW9Hep9lMrxD7kW+/UW:N9ppANODKixjamWV9HepHk9y |
IMP |
2B2B7A1E7CCC100662D4B1A5C77D17CF |
PESHA1 |
F97FF19E290A8F26FFFB93D1785F943021AE00B5 |
PE256 |
5F47BC348FBF69A50511A4154948AD8B6428EA860800D49E8DF61DEB6C321194 |
DLL Exports:
Function Name |
Ordinal |
Type |
NPGetResourceInformation |
8 |
Exported Function |
NPGetConnectionPerformance |
49 |
Exported Function |
NPGetConnection |
7 |
Exported Function |
NPOpenEnum |
12 |
Exported Function |
NPGetUniversalName |
10 |
Exported Function |
NPGetResourceParent |
9 |
Exported Function |
NPCancelConnection |
3 |
Exported Function |
NPAddConnection3 |
2 |
Exported Function |
NPAddConnection |
1 |
Exported Function |
NPGetCaps |
6 |
Exported Function |
NPEnumResource |
5 |
Exported Function |
NPCloseEnum |
4 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: DRPROV.DLL.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/9f631de2b52b461867eb6fc41890487d34b674c43b67c8eb13ca638c3b460a1d/detection/
MIT License. Copyright (c) 2020-2021 Strontic.