ncuprov.dll

  • File Path: C:\Windows\system32\ncuprov.dll
  • Description: Network Connectivity Statistics Provider for System Resource Usage Monitor Service

Hashes

Type Hash
MD5 A764A623AC9D341E6FD67EFA88298F69
SHA1 6393B8A62120B18B7EC895ADA0372A95B21F801D
SHA256 F1C24DD350273BA1745369695F10957F5AB6D303E72E8C80D955B5A26F1295B5
SHA384 DEF57097A5B02F8B16A1B4BDCB6447FFB26425CC082BAA1DDBF69894CF55AB2141F2627C3067E030319D67173296DB41
SHA512 B669B248DD29AC6E91011C1CC58B6EAF02EA767E13C098C977F6B579DC9A6B1F9CDFB5832C7A9187F62C1777B8784DEAF6990EAA15E6FFEC760E1676C5A369D6
SSDEEP 384:puv4T7E2fIYcuyv3EENSiWwnW29OTsy22po0PuhddDyrAVMZtponRgtbC3IWcWp0:Um7EPfRuc9OIy2283wAmxCgt2IWru
IMP 58A6B44B1E9048091419C55FAED4FCD9
PESHA1 C4CD178D0BB18A8975B30D1D52BB4FC5EA2F6A15
PE256 6A8BF8B46D76B14E154794E96B3CA74C3D4710D00D3B4E18850544F492315CB2

DLL Exports:

Function Name Ordinal Type
SruUninitializeProvider 2 Exported Function
SruInitializeProvider 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ncuprov.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/f1c24dd350273ba1745369695f10957f5ab6d303e72e8c80d955b5a26f1295b5/detection/

MIT License. Copyright (c) 2020-2021 Strontic.