ipnathlp.dll

  • File Path: C:\Windows\system32\ipnathlp.dll
  • Description: Microsoft NAT Helper Components

Hashes

Type Hash
MD5 695E536B9372B209473FC3B29343DB27
SHA1 03D946D3748EB7D81EE92FCFCA44CAED21D87D4C
SHA256 EFD82274D4555457A44E8A9C7FC2A767075196218FD62790D9DEEED1732B2A86
SHA384 C443D039586276BF842E0CC5D79223C379F70E2AF1A247E4A1267347E1C4D0068C4B18532721710797F7990340CE76F5
SHA512 172C3307559E24AF4A214353B30BA603DFF2380F971F5E3C2D18FC8FFE0F9C71FCFDD6763C51B8A82D0FBAA3EEE19483B69575F67C9DFE6C2D27F443CDC9C198
SSDEEP 12288:0lD7oqg5h1YWjeIAMgMqKGLIlg7mR2YWZY:C3oXPYW8yGIl648ZY
IMP 3B89C98473CBC3685387F9493F1DC243
PESHA1 799A0EECD4CBD8E9C060FB8C921EA640A51F75C2
PE256 CE1BC9777013A1F789AFB2F6EA22175367273E063D346264422BF273F7363B6A

DLL Exports:

Function Name Ordinal Type
NhDeleteSocket 6 Exported Function
NhCreateStreamSocket 5 Exported Function
NhInitializeTraceManagement 8 Exported Function
NhInitializeBufferManagement 7 Exported Function
NhAcquireFixedLengthBuffer 2 Exported Function
NhAcceptStreamSocket 1 Exported Function
NhCreateDatagramSocket 4 Exported Function
NhAcquireVariableLengthBuffer 3 Exported Function
RegisterProtocol 14 Exported Function
NhWriteStreamSocket 13 Exported Function
SvchostPushServiceGlobals 15 Exported Function
ServiceMain 32 Exported Function
NhReadStreamSocket 10 Exported Function
NhReadDatagramSocket 9 Exported Function
NhWriteDatagramSocket 12 Exported Function
NhReleaseBuffer 11 Exported Function
NatCreateDynamicRedirectEx 21 Exported Function
NatCreateDynamicRedirect 20 Exported Function
NatCreateRedirectEx 23 Exported Function
NatCreateRedirect 22 Exported Function
NatCancelDynamicRedirect 17 Exported Function
NatAcquirePortReservation 16 Exported Function
NatCreateDynamicFullRedirect 19 Exported Function
NatCancelRedirect 18 Exported Function
NatReleasePortReservation 29 Exported Function
NatQueryInformationRedirectHandle 28 Exported Function
NatShutdownTranslator 31 Exported Function
NatShutdownPortReservation 30 Exported Function
NatInitializeTranslator 25 Exported Function
NatInitializePortReservation 24 Exported Function
NatQueryInformationRedirect 27 Exported Function
NatLookupAndQueryInformationSessionMapping 26 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: IPNATHLP.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/efd82274d4555457a44e8a9c7fc2a767075196218fd62790d9deeed1732b2a86/detection/

MIT License. Copyright (c) 2020-2021 Strontic.