nlmproxy.dll

  • File Path: C:\Windows\system32\nlmproxy.dll
  • Description: Network List Manager Public Proxy

Hashes

Type Hash
MD5 19BF97A3B593CD680745ACEDAFE548D4
SHA1 17A0861124F78C01C99A880F432B9745AED97284
SHA256 7280E9FDB0F19715654046718F095FC741EB7960D6D9B6C90F5D1D4EF0CF518F
SHA384 4E20DDC17362D8AD556D47F926FE26E8BE839CE5203C6B165FC1470466E5AD5674787C385DD86A4D4E0972B2F7C1F78B
SHA512 39635ECC2A4EAC89302663D5D057F5633549D0F794471AF71B83D8FF8A36D1E0D38317A5FBFE19B79FC0D65595945A6404A130031C70469935236F45601CB33E
SSDEEP 384:/7/26ZZ9tygO3bk8Fuj6cinCoV7dBiduVu1gWisW4t9Nuvxt0:/Zrl6cgC+kuV8IX70
IMP A0832125113BE52CB6FCD757F95EAD81
PESHA1 700FB99B6C623E71193D5E204623D1B727DD5A92
PE256 81D1AACA3729D42141A76C77FDC5B50A4ED1E37135CCE5538723A496ECCFA123

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 4 Exported Function
GetProxyDllInfo 5 Exported Function
DllRegisterServer 3 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: nlmfproxy.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.423 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.423
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/7280e9fdb0f19715654046718f095fc741eb7960d6d9b6c90f5d1d4ef0cf518f/detection/

MIT License. Copyright (c) 2020-2021 Strontic.