nsi.dll
- File Path:
C:\Windows\SysWOW64\nsi.dll
- Description: NSI User-mode interface DLL
Hashes
Type |
Hash |
MD5 |
DBD708765E62C0DD5574E3EA4C7D4517 |
SHA1 |
D43FB3A078167C7B35D6819667662AAC889B6C0C |
SHA256 |
C93062EC30D82B39F9362C80E216D122543B459829588F54262DF4488C4CF705 |
SHA384 |
CC0C82BEA6FF4C5EF240CDABFA88A1A9065DE7104A38609A9E659F9749EC726EB320D9B249B6A4AFA372788A1F7EB3D1 |
SHA512 |
3B53F78B7B63FEF90F5C9677844A6F5D766908B3B52817C062826F7E2C046E4121B8A5BA3BC99249AD9D634D1252A9CA4C6BE5BDA8CA14F9C3F5B22F6C6DA715 |
SSDEEP |
384:lVNXWfBumKokV54Mj8/bLtWVVWJLVyDBRJrGw6lx2+tN:lVNXOBurpNITQeLI1PCptN |
IMP |
9F19B08BA92C5E2D2FFFC1B3724649DB |
PESHA1 |
B40D1938157201AB89D78723B020D51A90425378 |
PE256 |
6EA10B986C10A2C0350EA5D664DDE485F30392F4C2568ED3314E2D68DF69304F |
DLL Exports:
Function Name |
Ordinal |
Type |
NsiRegisterChangeNotification |
17 |
Exported Function |
NsiRegisterChangeNotificationEx |
18 |
Exported Function |
NsiRequestChangeNotification |
19 |
Exported Function |
NsiGetObjectSecurity |
14 |
Exported Function |
NsiGetParameter |
15 |
Exported Function |
NsiGetParameterEx |
16 |
Exported Function |
NsiRequestChangeNotificationEx |
20 |
Exported Function |
NsiSetObjectSecurity |
24 |
Exported Function |
NsiSetParameter |
25 |
Exported Function |
NsiSetParameterEx |
26 |
Exported Function |
NsiSetAllParameters |
21 |
Exported Function |
NsiSetAllParametersEx |
22 |
Exported Function |
NsiSetAllPersistentParametersWithMask |
23 |
Exported Function |
NsiDeregisterChangeNotification |
4 |
Exported Function |
NsiDeregisterChangeNotificationEx |
5 |
Exported Function |
NsiEnumerateObjectsAllParameters |
6 |
Exported Function |
NsiAllocateAndGetPersistentDataWithMaskTable |
1 |
Exported Function |
NsiAllocateAndGetTable |
2 |
Exported Function |
NsiCancelChangeNotification |
3 |
Exported Function |
NsiEnumerateObjectsAllParametersEx |
7 |
Exported Function |
NsiGetAllParameters |
11 |
Exported Function |
NsiGetAllParametersEx |
12 |
Exported Function |
NsiGetAllPersistentParametersWithMask |
13 |
Exported Function |
NsiEnumerateObjectsAllPersistentParametersWithMask |
8 |
Exported Function |
NsiFreePersistentDataWithMaskTable |
9 |
Exported Function |
NsiFreeTable |
10 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: nsi.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/67
- VirusTotal Link: https://www.virustotal.com/gui/file/c93062ec30d82b39f9362c80e216d122543b459829588f54262df4488c4cf705/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.