nduprov.dll

  • File Path: C:\Windows\system32\nduprov.dll
  • Description: Network Statistics Provider for System Resource Usage Monitor Service

Hashes

Type Hash
MD5 827A79407F9768723F07B4D5EDD706F6
SHA1 BC40636F85038B3BF8A36E2E085933123299ED45
SHA256 903F04D5183F40822AFD57B551799C972501074F28057699C95D6F6A9F8C8072
SHA384 9A5A2BDDDECC9FD6563A526748A866D7FDDE0786706714A63A6E20E1FBDE49D20F8ACC18652C89B0671C9752992AB554
SHA512 DF2F9CC79545603D964FFA01D0C09B3FC485965F01734619A8827C3D3685AB22874D6DCA59B6F8E02194BA9645BAE90EC9F4B3743CEC0D621F1729B9285ECD90
SSDEEP 3072:P+hfO/bMcqv6JraNnWDZORR2T2Yv9vbwRTYT7PzwP:Efaqv6Jra5WDZORROzNT7r
IMP B6A82320746E4220423897D54ABCF6D5
PESHA1 E72E548E110D39BABC921012E127F1E259CBD9A1
PE256 68405DB7D4ADDFBE1957584E7A556E9ACC233DE6819CFCAF54F2BEF4CD96B570

DLL Exports:

Function Name Ordinal Type
PopulateUserName 6 Exported Function
OverflowCheckOnBytesFromContainers 5 Exported Function
SruUninitializeProvider 8 Exported Function
SruInitializeProvider 7 Exported Function
CommitStatsHelperDedupHostData 2 Exported Function
CommitStatsHelperCollectContainerData 1 Exported Function
NduProvPopulateStatsFromRecord 4 Exported Function
DedupDoubleCountedData 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: nduprov.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/903f04d5183f40822afd57b551799c972501074f28057699c95d6f6a9f8c8072/detection/

MIT License. Copyright (c) 2020-2021 Strontic.