gpapi.dll

  • File Path: C:\Windows\system32\gpapi.dll
  • Description: Group Policy Client API

Hashes

Type Hash
MD5 FC79EA208ADE01612E19AFEA57FA4C85
SHA1 04F109E8F721DE051E6CA4401DCDD61D1CCBF9E8
SHA256 80E41A66C4E962B7EADC8E3A44A5497B16AAE86B4C5EC7E5E34A26CA11912DD3
SHA384 DDC830AE967684C808853E1C4D41A5A2FA90FB45CD42C495C072389B1217A26AE14F4357380596F1F40499B6C9C71712
SHA512 AFEFDE810F34A0F94C817C216CD6C0A8AC78953D2933C9981A3EB051F65ECC32761AC09E97385E8270CCECD196B7D8102556ED1FE0C1B81C00C449810B6AFDFE
SSDEEP 3072:WkKnasCUVgP+NgytxLp7ZFxRsiu+b/ipQThwdJxRgRS:tJsCUY+NgMxBZFxyj8WdJxR
IMP 6B871724F08FAFB4F059D3923F8650F7
PESHA1 938437EE5CBE294ABA3D44831FA00F928C087F1A
PE256 8EC3894E184EF8A96375A5D5ADF52C77EEBC80A7F57DF4D1FC35AB78226B3692

DLL Exports:

Function Name Ordinal Type
LeaveCriticalPolicySectionInternal 150 Exported Function
IsSyncForegroundPolicyRefreshWorker 149 Exported Function
LeaveCriticalPolicySectionInternalWorker 125 Exported Function
RefreshPolicyExInternalWorker 126 Exported Function
RefreshPolicyExInternal 151 Exported Function
HasPolicyForegroundProcessingCompletedInternalWorker 124 Exported Function
GetNextFgPolicyRefreshInfoInternalWorker 145 Exported Function
GetNextFgPolicyRefreshInfoInternal 144 Exported Function
GetPreviousFgPolicyRefreshInfoInternal 146 Exported Function
HasPolicyForegroundProcessingCompletedInternal 148 Exported Function
GetPreviousFgPolicyRefreshInfoInternalWorker 147 Exported Function
RefreshPolicyInternal 152 Exported Function
WaitForMachinePolicyForegroundProcessingInternal 156 Exported Function
UnregisterGPNotificationInternalWorker 130 Exported Function
WaitForMachinePolicyForegroundProcessingInternalWorker 157 Exported Function
WaitForUserPolicyForegroundProcessingInternalWorker 159 Exported Function
WaitForUserPolicyForegroundProcessingInternal 158 Exported Function
UnregisterGPNotificationInternal 155 Exported Function
RegisterGPNotificationInternal 153 Exported Function
RefreshPolicyInternalWorker 127 Exported Function
RegisterGPNotificationInternalWorker 128 Exported Function
RsopLoggingEnabledInternalWorker 129 Exported Function
RsopLoggingEnabledInternal 154 Exported Function
ForceSyncFgPolicyInternal 134 Exported Function
EnterCriticalPolicySectionInternalWorker 117 Exported Function
ForceSyncFgPolicyInternalWorker 135 Exported Function
FreeGPOListInternalAWorker 118 Exported Function
FreeGPOListInternalA 136 Exported Function
EnterCriticalPolicySectionInternal 133 Exported Function
AreThereVisibleLogoffScriptsInternalWorker 108 Exported Function
AreThereVisibleLogoffScriptsInternal 131 Exported Function
AreThereVisibleShutdownScriptsInternal 132 Exported Function
EnterCriticalPolicySectionExStub 112 Exported Function
AreThereVisibleShutdownScriptsInternalWorker 111 Exported Function
FreeGPOListInternalW 137 Exported Function
GetGPOListInternalA 142 Exported Function
GetAppliedGPOListInternalWWorker 121 Exported Function
GetGPOListInternalAWorker 122 Exported Function
GetGPOListInternalWWorker 123 Exported Function
GetGPOListInternalW 143 Exported Function
GetAppliedGPOListInternalW 141 Exported Function
GenerateGPNotificationInternal 139 Exported Function
FreeGPOListInternalWWorker 138 Exported Function
GenerateGPNotificationInternalWorker 119 Exported Function
GetAppliedGPOListInternalAWorker 120 Exported Function
GetAppliedGPOListInternalA 140 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: gpapi.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/80e41a66c4e962b7eadc8e3a44a5497b16aae86b4c5ec7e5e34a26ca11912dd3/detection/

MIT License. Copyright (c) 2020-2021 Strontic.