hotplug.dll

  • File Path: C:\Windows\system32\hotplug.dll
  • Description: Safely Remove Hardware applet

Hashes

Type Hash
MD5 A326BD6F5AF6CBA6A83ACD1B5FEB6C79
SHA1 05445D6382CEEF8EDFE3EF3853E78B66FF46256D
SHA256 6B11DE1E680EF9FFA979F75ED12319A1EB90B01BD68665DB7F7E3042F04FB88A
SHA384 95156E733C73E3518765EB003C28A7A4380058B0572959321B2F67BF91897AEF03665E6C2463970F101BCEAA14EF8397
SHA512 235C0378119D425109FF879F70A54690DA6698D0150173D3464862917BC2AADB3401EF2371E3412D9DAFE22DFB20643F09F423DE6683A1953A923FDECF1BFE43
SSDEEP 1536:sTO5+DAIU10nZZ30bUSipZIyRzwPKr6dTFWkvSfj:75EM0ZZ30bVEAFhSfj
IMP 3341BC2EDE2BAEEAF8F8CFA9CAD95970
PESHA1 50A3835F9CCCFD3CBCC9097527A9BC73D0B6F0E7
PE256 83A28A90E364801477820A8492ED7F62902A9E27C5410FFB28B454F95722FAF2

DLL Exports:

Function Name Ordinal Type
HotPlugSafeRemovalDriveNotificationW 9 Exported Function
HotPlugRemovalVetoedW 8 Exported Function
HotPlugHibernateVetoedW 7 Exported Function
HotPlugWarmEjectVetoedW 12 Exported Function
HotPlugStandbyVetoedW 11 Exported Function
HotPlugSafeRemovalNotificationW 10 Exported Function
HotPlugEjectVetoedW 6 Exported Function
HotPlugChildWithInvalidIdW 2 Exported Function
DllGetClassObject 13 Exported Function
CPlApplet 1 Exported Function
HotPlugEjectDeviceEx 5 Exported Function
HotPlugEjectDevice 4 Exported Function
HotPlugDriverBlockedW 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hotplug.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/6b11de1e680ef9ffa979f75ed12319a1eb90b01bd68665db7f7e3042f04fb88a/detection/

MIT License. Copyright (c) 2020-2021 Strontic.