ncsi.dll
- File Path:
C:\Windows\system32\ncsi.dll
- Description: Network Connectivity Status Indicator
Hashes
| Type |
Hash |
| MD5 |
B296DC40BD0D86A77B7A1D170F220BF5 |
| SHA1 |
DF3579413EB4E46EFBDD55927C5F726A4A34E496 |
| SHA256 |
77DEE7840CE73247C032B02B0FB404FB7B749466A1F75966DF0B01F89871CCF5 |
| SHA384 |
A5116F8D34E371D6404E03D8406E45D663C3240B303B1F5EEDD5D779E18B1A242F3E640E4F2BA59F16F88153C84D1B96 |
| SHA512 |
AC536FA1357187F0DB4D24C6334289297F1703059CA10195D4D8F919E6DC33450EF8607F9691C2A0C9BC3950B18479617F7C1F5ED64CF5B86A17DB742F57CDB0 |
| SSDEEP |
12288:R1FnHpL0eUaQMv2ynr+9EKNstBG2hE60nwZc+f:/FnGAnr0EKNstH0wZc+ |
| IMP |
382C2F37073EBF29B456946172D82CE8 |
| PESHA1 |
0193C57172E21BBF0B4B50072D7CED8373906BF6 |
| PE256 |
4018011A3B21EBF50FC474DA9B019AE8038EFC69DE420797468A7FD4E4982643 |
DLL Exports:
| Function Name |
Ordinal |
Type |
NcsiPerformRefresh |
8 |
Exported Function |
NcsiNotifySessionChange |
7 |
Exported Function |
NcsiPerformReprobe |
9 |
Exported Function |
NcsiUpdateClientPresence |
11 |
Exported Function |
NcsiRegisterConnectivityStatusChange |
10 |
Exported Function |
NcsiIdentifyUserSpecificProxies |
6 |
Exported Function |
NcsiDeregisterConnectivityStatusChange |
2 |
Exported Function |
NcsiAllocateAndGetConnectivityStatusSet |
1 |
Exported Function |
NcsiFreeConnectivityStatusSet |
3 |
Exported Function |
NcsiGetWebProbeConfig |
5 |
Exported Function |
NcsiGetCaptivePortalHosts |
4 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: ncsi.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/77dee7840ce73247c032b02b0fb404fb7b749466a1f75966df0b01f89871ccf5/detection/
MIT License. Copyright (c) 2020-2021 Strontic.