ndproxystub.dll

  • File Path: C:\Windows\SysWOW64\ndproxystub.dll
  • Description: Network Diagnostic Engine Proxy/Stub

Hashes

Type Hash
MD5 18ED063015BAB1F7621F8BA11FB01714
SHA1 F4DC58AE61504A89ABE119E4699594611DF67B17
SHA256 2E48FF636E2771DC2BD6DE2D0321B719F47E192730FA52B8F5C2517289877C83
SHA384 F6A9F296610AFEFBADA495CCC7E0E0328223C14DB15DD7158F40C3C30146CC5743C73B85B28A3AF30414ED908C1DB0B2
SHA512 5C0A52E561ED18C84C9E13C444D9E6765B9919E77CF9A9CBD2A881394AD6526EF518E4F4620100F19409FC88D90A30FA9DAA65BD14C36B159F70A6ED6E2D5786
SSDEEP 384:KLfd3sKmxgCmAiCPc+SEhEeXndnqu0F8Wo/WBFHA:Kh3lU4AVzZ3dn/CeCHA
IMP 061B952B5D1C5C0BA973C791E7B6D4EA
PESHA1 0E803466195A3B4CE9F52FCE9C9BF375F15496C8
PE256 6268C96CFE8F851B37B6AB7E371A379E45C7744DA67DBDBC4F88453AF97574F1

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 4 Exported Function
GetProxyDllInfo 5 Exported Function
DllRegisterServer 3 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ndproxystub.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/2e48ff636e2771dc2bd6de2d0321b719f47e192730fa52b8f5c2517289877c83/detection/

MIT License. Copyright (c) 2020-2021 Strontic.