msimg32.dll

  • File Path: C:\Windows\system32\msimg32.dll
  • Description: GDIEXT Client DLL

Hashes

Type Hash
MD5 7694F8F61653819252AF922848469B04
SHA1 BD0B1E5C9D4EDD8D9C72B0401157060FD353E2D8
SHA256 9F52098830F67C8E4165BF6B81F7B44CD8AE83F56DE17FB38CBFA6899DDBCB57
SHA384 48EF3CB5687B4FCFCB9DFCAF1B77F6A7EDE068639ABECEB6AAA48151C4F0EB01AB5D0C5C411335283B4F28903C3FCA54
SHA512 24ACE1D6260D56C7EF5D6FCD46817182CC3B0D5384BD61C9DAD03BFCD9DEE648E08ED7E7B1B93C277333EC49FD65C519677922EAC256EAD5CEE66B11E3472A36
SSDEEP 96:FGJmEBX/XET0FGwozNFycJEcEZHnEW3KIWw:wmyXPxWy8EcEZkW3KIW
IMP B7EF9630C9E2EAA54D80CF5332520503
PESHA1 DB383DF4A3C42A63F508B35FA958B28E5CEE6D67
PE256 BC6D145DCFC73DAC39B8EFD241377E9261D095E0BF9AC810C09FC2C29B21BE99

DLL Exports:

Function Name Ordinal Type
TransparentBlt 5 Exported Function
vSetDdrawflag 1 Exported Function
GradientFill 4 Exported Function
AlphaBlend 2 Exported Function
DllInitialize 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: gdiext
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/65
  • VirusTotal Link: https://www.virustotal.com/gui/file/9f52098830f67c8e4165bf6b81f7b44cd8ae83f56de17fb38cbfa6899ddbcb57/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\msimg32.dll 33

MIT License. Copyright (c) 2020-2021 Strontic.