gpapi.dll

  • File Path: C:\Windows\SysWOW64\gpapi.dll
  • Description: Group Policy Client API

Hashes

Type Hash
MD5 D621353BA9DFE8A4798E63869DE4E441
SHA1 5BE3610982E7661FE056E2575992940A263C3259
SHA256 2609D17D21AF0A5219F4766187E46225CC4D2CDE87EAB2A88E070F81760D665C
SHA384 CBE63D49987078947BC9F83DC5CC2ADDAA0681966B053EF3057DD148C0F7D5FDFFB6A6B0AF20336D95150534F3AD7A24
SHA512 3DA06189E5A24CA35AFB16F2E676C3F56DAB2C18A16CE0D0BEA1243FCDE3C17BDEFD9283C3DEB07A2E83517CD53F7892D0306859F1E040321D0CDF7AACD77E18
SSDEEP 3072:m+KypQTl8NG7HpACzUG9nwNu6wBJkibgsojXvNX:mxb72zG9nwNu6wBJkissoF
IMP 99118C12D516274F99AF967DB5A02393
PESHA1 EA98348737D265DE131030B0D3C5ED22C4D11C22
PE256 3D13F6517D63FEFA7914C120617E18EB2F912F0CB0C49E7776AC8E68840BAC89

DLL Exports:

Function Name Ordinal Type
LeaveCriticalPolicySectionInternal 150 Exported Function
IsSyncForegroundPolicyRefreshWorker 149 Exported Function
LeaveCriticalPolicySectionInternalWorker 125 Exported Function
RefreshPolicyExInternalWorker 126 Exported Function
RefreshPolicyExInternal 151 Exported Function
HasPolicyForegroundProcessingCompletedInternalWorker 124 Exported Function
GetNextFgPolicyRefreshInfoInternalWorker 145 Exported Function
GetNextFgPolicyRefreshInfoInternal 144 Exported Function
GetPreviousFgPolicyRefreshInfoInternal 146 Exported Function
HasPolicyForegroundProcessingCompletedInternal 148 Exported Function
GetPreviousFgPolicyRefreshInfoInternalWorker 147 Exported Function
RefreshPolicyInternal 152 Exported Function
WaitForMachinePolicyForegroundProcessingInternal 156 Exported Function
UnregisterGPNotificationInternalWorker 130 Exported Function
WaitForMachinePolicyForegroundProcessingInternalWorker 157 Exported Function
WaitForUserPolicyForegroundProcessingInternalWorker 159 Exported Function
WaitForUserPolicyForegroundProcessingInternal 158 Exported Function
UnregisterGPNotificationInternal 155 Exported Function
RegisterGPNotificationInternal 153 Exported Function
RefreshPolicyInternalWorker 127 Exported Function
RegisterGPNotificationInternalWorker 128 Exported Function
RsopLoggingEnabledInternalWorker 129 Exported Function
RsopLoggingEnabledInternal 154 Exported Function
ForceSyncFgPolicyInternal 134 Exported Function
EnterCriticalPolicySectionInternalWorker 117 Exported Function
ForceSyncFgPolicyInternalWorker 135 Exported Function
FreeGPOListInternalAWorker 118 Exported Function
FreeGPOListInternalA 136 Exported Function
EnterCriticalPolicySectionInternal 133 Exported Function
AreThereVisibleLogoffScriptsInternalWorker 108 Exported Function
AreThereVisibleLogoffScriptsInternal 131 Exported Function
AreThereVisibleShutdownScriptsInternal 132 Exported Function
EnterCriticalPolicySectionExStub 112 Exported Function
AreThereVisibleShutdownScriptsInternalWorker 111 Exported Function
FreeGPOListInternalW 137 Exported Function
GetGPOListInternalA 142 Exported Function
GetAppliedGPOListInternalWWorker 121 Exported Function
GetGPOListInternalAWorker 122 Exported Function
GetGPOListInternalWWorker 123 Exported Function
GetGPOListInternalW 143 Exported Function
GetAppliedGPOListInternalW 141 Exported Function
GenerateGPNotificationInternal 139 Exported Function
FreeGPOListInternalWWorker 138 Exported Function
GenerateGPNotificationInternalWorker 119 Exported Function
GetAppliedGPOListInternalAWorker 120 Exported Function
GetAppliedGPOListInternalA 140 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: gpapi.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/2609d17d21af0a5219f4766187e46225cc4d2cde87eab2a88e070f81760d665c/detection/

MIT License. Copyright (c) 2020-2021 Strontic.