negoexts.dll

  • File Path: C:\Windows\SysWOW64\negoexts.dll
  • Description: NegoExtender Security Package

Hashes

Type Hash
MD5 491C5F05D4F5045A32760F7C028E1B8D
SHA1 5C528B64A0552C4DEFDDF855808D24E418B03B10
SHA256 BCB153B8DF27046F870BAC17B08FDF68FD5CA2BF5F613350BED62E74A4145427
SHA384 8E9A68278298470BD354FF98648C008BAEDBF8AB5010BBD3C6A909287E150D218F50931CF89B0DCAD23150034449B3B2
SHA512 3968BA4A3AEE33EAEDA86F7BB236B85EA5FA57A890A0ACA8F2C9F97795621AFE16C63B284B2F8FA08250C9AED45E35D429FFF5F9AD4CCA9D4FD2F46B29D7ECAA
SSDEEP 1536:qnLNi9RIO3Z3aazM8JQUe1PePf5QNxjdvBuCcA7cYIDcFbk+SIEtb5+x:Gi9RIIMaGD1PePxQNxjFcHcFfVED+
IMP BB55F0D13A119544CAE76B7B8CC619E2
PESHA1 43F5835893D7AD72D81DB040B5CF3A1C8D8646C7
PE256 C28653C6809AE51D298F8F45729F4B6F655908F7EEF3960948B4E2EA94DCE2B0

DLL Exports:

Function Name Ordinal Type
SpUserModeInitialize 2 Exported Function
SpLsaModeInitialize 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: negoexts.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/bcb153b8df27046f870bac17b08fdf68fd5ca2bf5f613350bed62e74a4145427/detection/

MIT License. Copyright (c) 2020-2021 Strontic.