iumbase.dll
- File Path:
C:\Windows\system32\iumbase.dll
- Description: IUM Layer Secure Win32 DLL
Hashes
Type |
Hash |
MD5 |
FDB3C7D85D50A51C365EA2ADACAB37B6 |
SHA1 |
0BE5EE21AFBD2D4D87B6B70B794760846D38ECE6 |
SHA256 |
D33D061F3389434A2E0245DF0F254BFD77BD492471AC125E5EBA6DF00427D784 |
SHA384 |
4AC637B12F49290BDAFED0F4997B2E1075A66C251AAAEB9A7DFC0B447EF7F3E742F0A2DA933DDC520021BE69E052DCDC |
SHA512 |
750CECBBBF93DD6F18EBF23B60D7DE9B242F1F55690EFD2C0C084A3D5763D07FAB657EA217687A0AF180726B71F55732EFB84ED8162077E4F5442DC9CE938E5F |
SSDEEP |
384:kKhYBFuxjhX0SgVIOWV6NWyNoJGVcG/WG1kJGL8SpVyDBRJnVvlm08:JhYBc0LIUNflRZPI1PnVO |
IMP |
0DAC99DB7FFC774E1B197156795B2A0B |
PESHA1 |
7B482F2D0DC0F1F4EF8BB9116E000CC3A66F9EAA |
PE256 |
3308FB5C6E3F92045B305D8CA45592A38013E01A515EFF04BE42DAC28BB0718B |
DLL Exports:
Function Name |
Ordinal |
Type |
OpenCurrentExtension |
24 |
Exported Function |
MapSecureIo |
23 |
Exported Function |
PostMailbox |
26 |
Exported Function |
OpenSecureSection |
25 |
Exported Function |
GetTaggedDataSize |
20 |
Exported Function |
GetTaggedData |
19 |
Exported Function |
IsSecureProcess |
22 |
Exported Function |
GetTpmBindingInfo |
21 |
Exported Function |
ProtectSecureIo |
27 |
Exported Function |
UnmapSecureIo |
33 |
Exported Function |
SetPolicyExtension |
32 |
Exported Function |
VbsVmSysCall |
35 |
Exported Function |
UpdateSecureDeviceState |
34 |
Exported Function |
SecureStorageGet |
29 |
Exported Function |
QuerySecureDeviceInformation |
28 |
Exported Function |
SetDmaTargetProperties |
31 |
Exported Function |
SecureStoragePut |
30 |
Exported Function |
GetSignedReport |
18 |
Exported Function |
DecryptData |
6 |
Exported Function |
CreateSecureSectionSpecifyPages |
5 |
Exported Function |
DmaMapMemory |
8 |
Exported Function |
DecryptISKBoundData |
7 |
Exported Function |
AwaitSmc |
2 |
Exported Function |
AssignMemoryToSocDomain |
1 |
Exported Function |
CreateSecureSection |
4 |
Exported Function |
CreateSecureDevice |
3 |
Exported Function |
EmitSmc |
9 |
Exported Function |
GetSecureIdentityKey |
15 |
Exported Function |
GetFipsModeFromIumKernelState |
14 |
Exported Function |
GetSeedFromIumKernelState |
17 |
Exported Function |
GetSecureIdentitySigningKey |
16 |
Exported Function |
FlushSecureSectionBuffers |
11 |
Exported Function |
EncryptData |
10 |
Exported Function |
GetExposedSecureSection |
13 |
Exported Function |
GetDmaEnabler |
12 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: iumbase.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/d33d061f3389434a2e0245df0f254bfd77bd492471ac125e5eba6df00427d784/detection/
MIT License. Copyright (c) 2020-2021 Strontic.