nsi.dll

  • File Path: C:\Windows\system32\nsi.dll
  • Description: NSI User-mode interface DLL

Hashes

Type Hash
MD5 6EE76F0ACF5ABB72989F5AAEBE8B6877
SHA1 A9B3009B2EC6A70D3038532EE7202F328B411440
SHA256 A82C3F5CD65D3FDACB5576BD55AAEA87DE5CCEA44125EBA6E6E4D92BE5ACD7E6
SHA384 DC07CBCB7166EC226C9BC56C27AF564C10FCA15ED8DAEE6D6B16B9E1A0A731A7D480A2EA379064DE53F39D8E48D7CB59
SHA512 E64AC09D7E7CE740254672F31B91340C391D194CB07D5F73FECC3B003E2E585370EA76F1368089873AEA52EDC29C6F6E48CF0F89AB6E876C21F549007B43B381
SSDEEP 384:dk7t3jIzcT61gms1gd5KDbLobKWVVWYVyDBRJcxbolz8Jg:w3kzcTOSkb5/I1P6oP
IMP DEFB8C5BB37FCD63DC790B55724FDE42
PESHA1 ABE3FB7B4D975E265A816364D5340423BD4F44FC
PE256 8B4EC553F960D520B05E903F607FC4DA67DA9C3EB072333C6E0326A80EE51F03

DLL Exports:

Function Name Ordinal Type
NsiRegisterChangeNotification 17 Exported Function
NsiRegisterChangeNotificationEx 18 Exported Function
NsiRequestChangeNotification 19 Exported Function
NsiGetObjectSecurity 14 Exported Function
NsiGetParameter 15 Exported Function
NsiGetParameterEx 16 Exported Function
NsiRequestChangeNotificationEx 20 Exported Function
NsiSetObjectSecurity 24 Exported Function
NsiSetParameter 25 Exported Function
NsiSetParameterEx 26 Exported Function
NsiSetAllParameters 21 Exported Function
NsiSetAllParametersEx 22 Exported Function
NsiSetAllPersistentParametersWithMask 23 Exported Function
NsiDeregisterChangeNotification 4 Exported Function
NsiDeregisterChangeNotificationEx 5 Exported Function
NsiEnumerateObjectsAllParameters 6 Exported Function
NsiAllocateAndGetPersistentDataWithMaskTable 1 Exported Function
NsiAllocateAndGetTable 2 Exported Function
NsiCancelChangeNotification 3 Exported Function
NsiEnumerateObjectsAllParametersEx 7 Exported Function
NsiGetAllParameters 11 Exported Function
NsiGetAllParametersEx 12 Exported Function
NsiGetAllPersistentParametersWithMask 13 Exported Function
NsiEnumerateObjectsAllPersistentParametersWithMask 8 Exported Function
NsiFreePersistentDataWithMaskTable 9 Exported Function
NsiFreeTable 10 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: nsi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/a82c3f5cd65d3fdacb5576bd55aaea87de5ccea44125eba6e6e4d92be5acd7e6/detection/

MIT License. Copyright (c) 2020-2021 Strontic.