mspatcha.dll
- File Path:
C:\Windows\system32\mspatcha.dll
- Description: Microsoft File Patch Application API
Hashes
Type |
Hash |
MD5 |
48A990F88BD7CEC7E0EAB89552FEF6EF |
SHA1 |
38597E1BA204FAB5FB634FD7BCD24818096458B4 |
SHA256 |
53F5CE92F5587B5E9C1B990C1691B4E327CE500DA48C73706CA2907337E0ADDF |
SHA384 |
B6FEC85A58D414FC55F89EA234B11E81E6E735F07C644A1B384D610035FB81C827ADE9CBB0AD95D2751505F3FB854A71 |
SHA512 |
E5E4B9B2C4A016AE3396532C39C5FB60BC225C5F9DA398CA68098CB84C194F84E90712D62475D8B618AD540259AE79A9BE73469584261C4695F5622190C17DC6 |
SSDEEP |
768:JCYqvYlGLKQv47c8IxsV9uStgIyc1kRitXq8yfsvXwU36tnCn848QRoWPI1PVo:Ty9UwK9WkkkXbMC841oWIPVo |
IMP |
5F25BCDD77311CAEEB31449951465D87 |
PESHA1 |
43F01F4F3F6BA82DB080C5CD9DCA3788919FBCB1 |
PE256 |
C3A5F8590C523C57815D981265957F8178A13534D44CCBE189DF062B565EF8CC |
DLL Exports:
Function Name |
Ordinal |
Type |
GetFilePatchSignatureW |
11 |
Exported Function |
NormalizeFileForPatchSignature |
12 |
Exported Function |
GetFilePatchSignatureByBuffer |
9 |
Exported Function |
GetFilePatchSignatureByHandle |
10 |
Exported Function |
TestApplyPatchToFileByHandles |
15 |
Exported Function |
TestApplyPatchToFileW |
16 |
Exported Function |
TestApplyPatchToFileA |
13 |
Exported Function |
TestApplyPatchToFileByBuffers |
14 |
Exported Function |
ApplyPatchToFileByHandles |
3 |
Exported Function |
ApplyPatchToFileByHandlesEx |
4 |
Exported Function |
ApplyPatchToFileA |
1 |
Exported Function |
ApplyPatchToFileByBuffers |
2 |
Exported Function |
ApplyPatchToFileW |
7 |
Exported Function |
GetFilePatchSignatureA |
8 |
Exported Function |
ApplyPatchToFileExA |
5 |
Exported Function |
ApplyPatchToFileExW |
6 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: mspatcha.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 5.00 (WinBuild.160101.0800)
- Product Version: 5.00
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/67
- VirusTotal Link: https://www.virustotal.com/gui/file/53f5ce92f5587b5e9c1b990c1691b4e327ce500da48c73706ca2907337e0addf/detection/
MIT License. Copyright (c) 2020-2021 Strontic.