msrating.dll

  • File Path: C:\Windows\SysWOW64\msrating.dll
  • Description: “msrating.DYNLINK”

Hashes

Type Hash
MD5 A47B49E41BC5AE833E68C0677BF22D95
SHA1 C21561900D1E1DC2841D20265E28EEFB399CEFCC
SHA256 9DBBD6D2FDA114E2E2827F566B83EFE90DABFE599D95361C515EEDEA325472C4
SHA384 FAF131FE542E0F2261C039734F36BFF4B768E1E2E635E3E3A9D321A104D0A136B34581166BCAE4AD58E1A96CD8103B22
SHA512 3D8E9B4EC3B5D23F28A5E842A1843ED2D6EF7E6B5A6B06B48D201225F44B22916A106C563463F514ABB31E1757E1447013B1958F22736A28E531982BD2A812D9
SSDEEP 192:NmyILiAKoRAYmya91H18+MWzvqNWSt3WU:yLiAKoRA3dhkWSt3WU
IMP E0BD3263FD5EA99B1D0C2F6F5194CC24
PESHA1 DB7CA6FEDADA33C624B91FDBBA60BE658801EBAA
PE256 D22D45C2A18BB8798096118B4891BE04870EC0FA9081AE85EB4474BF23E9A722

DLL Exports:

Function Name Ordinal Type
RatingEnable 22 Exported Function
RatingCustomSetUserOptions 21 Exported Function
RatingEnableW 23 Exported Function
RatingEnabledQuery 24 Exported Function
RatingCustomInit 18 Exported Function
RatingCustomDeleteCrackedData 17 Exported Function
RatingCustomSetDefaultBureau 20 Exported Function
RatingCustomRemoveRatingHelper 19 Exported Function
RatingSetupUI 30 Exported Function
RatingObtainQueryW 29 Exported Function
VerifySupervisorPassword 32 Exported Function
RatingSetupUIW 31 Exported Function
RatingInit 26 Exported Function
RatingFreeDetails 25 Exported Function
RatingObtainQuery 28 Exported Function
RatingObtainCancel 27 Exported Function
RatingAccessDeniedDialog2W 5 Exported Function
RatingAccessDeniedDialog2 4 Exported Function
RatingAddPropertyPages 8 Exported Function
RatingAccessDeniedDialogW 7 Exported Function
ClickedOnPRF 2 Exported Function
ChangeSupervisorPassword 1 Exported Function
RatingAccessDeniedDialog 6 Exported Function
ClickedOnRAT 3 Exported Function
RatingCustomAddRatingHelper 14 Exported Function
RatingClickedOnRATInternal 13 Exported Function
RatingCustomCrackData 16 Exported Function
RatingCustomAddRatingSystem 15 Exported Function
RatingCheckUserAccess 10 Exported Function
RatingAddToApprovedSites 9 Exported Function
RatingClickedOnPRFInternal 12 Exported Function
RatingCheckUserAccessW 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: “msrating.DYNLINK”
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/9dbbd6d2fda114e2e2827f566b83efe90dabfe599d95361c515eedea325472c4/detection/

MIT License. Copyright (c) 2020-2021 Strontic.