ngclocal.dll

  • File Path: C:\Windows\system32\ngclocal.dll
  • Description: NGC Local Account APIs

Hashes

Type Hash
MD5 F5DE3901F8C55954DA77E7C2D5219D7D
SHA1 2D0F5306A17D2A307BFB5C7D30866533B3310FB6
SHA256 F7724FB16FB3CF1BA86E513CB7A97160895DAAA68F1600CAA8F6826070607ED6
SHA384 8AE863B9E7283119798406849F40E6EA6C1773A4674E06ABD507320E13CC46BF7D127B7386DCA6CCBFE76E6779F0C764
SHA512 3CFFBF8676AD1B74F340F59E7E90CC8359E0F0EB61F3665E02B54B4E5A10BACEDCB05DB889A9CD3197FF8FA4FA059A640C325F4AE40BDA21DCAECA14C9132533
SSDEEP 1536:2X6xyy70vYvqdLQ3R+vnMs9L6RkKcUbgzk0jzzQA:3vBCLQ0/MSLqcUkvjzkA
IMP 02478EBEBF89EF6CC732F626EFC81984
PESHA1 6B885383BF6DAD3E7627CB650FCB5092C75CCAB9
PE256 D67D1C52FCE6AEF7CDAD4FF982FA2ABD17A2051273D3A5CB64AFE276FA220070

DLL Exports:

Function Name Ordinal Type
NgcLocalFindCredential 4 Exported Function
NgcLocalRemoveCredential 5 Exported Function
NgcLocalChangeCredential 3 Exported Function
NgcLocalAddCredential 1 Exported Function
NgcLocalAddCredentialSilent 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ngclocal.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/f7724fb16fb3cf1ba86e513cb7a97160895daaa68f1600caa8f6826070607ed6/detection/

MIT License. Copyright (c) 2020-2021 Strontic.