mprext.dll

  • File Path: C:\Windows\system32\mprext.dll
  • Description: Multiple Provider Router Extension DLL

Hashes

Type Hash
MD5 0EABD6AB464758F058FC039A47F61750
SHA1 51BC562A59E565E3F39A54E4C788896B8803354B
SHA256 F96E8D99B736E4CE7997BB1DE65D88C32E16F1F725D8BD98F52C39A02969FD87
SHA384 9D908BC97FB18AA2FCA965444AC7FEB2E73EA817ACD5AE8496AB518E511CCDD331473DC9411F22441FB9F8413DBB904F
SHA512 F5A038615ECBB72072EF2A72D166CABBFD26AA879F28C911A26DB71581CB8B93B7554B1CFA1517B063FDC5F942281E7D409E70C998B8273FE9EE6A0FC61A00FB
SSDEEP 192:t2sVilvoSG4X6ryFKdEwFQnuyfc38EcX6mWf3W:t7Vilvo74XAyOFQfc3U6mWf3W
IMP 8C4EB7A549C77FAC0467B83CEBC5D650
PESHA1 74C721EFB7D778C2F0EEB104EDCE39D562FE89CD
PE256 5543E64F64A5C85D70C117C86553E05E3492BE5621ABF000446918A6B6A2CC85

DLL Exports:

Function Name Ordinal Type
WNetConnectionDialog1WWorker 8 Exported Function
ShowReconnectDialogWorker 7 Exported Function
WNetConnectionDialogWorker 9 Exported Function
WNetDisconnectDialogWorker 11 Exported Function
WNetDisconnectDialog1WWorker 10 Exported Function
ShowReconnectDialogUIWorker 6 Exported Function
DoCommandLinePromptWorker 2 Exported Function
DoBroadcastSystemMessageWorker 1 Exported Function
DoPasswordDialogWorker 3 Exported Function
ShowReconnectDialogEndWorker 5 Exported Function
DoProfileErrorDialogWorker 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mprext.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/f96e8d99b736e4ce7997bb1de65d88c32e16f1f725d8bd98f52c39a02969fd87/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\mprext.dll 40

MIT License. Copyright (c) 2020-2021 Strontic.