nsi.dll

  • File Path: C:\Windows\SysWOW64\nsi.dll
  • Description: NSI User-mode interface DLL

Hashes

Type Hash
MD5 DBD708765E62C0DD5574E3EA4C7D4517
SHA1 D43FB3A078167C7B35D6819667662AAC889B6C0C
SHA256 C93062EC30D82B39F9362C80E216D122543B459829588F54262DF4488C4CF705
SHA384 CC0C82BEA6FF4C5EF240CDABFA88A1A9065DE7104A38609A9E659F9749EC726EB320D9B249B6A4AFA372788A1F7EB3D1
SHA512 3B53F78B7B63FEF90F5C9677844A6F5D766908B3B52817C062826F7E2C046E4121B8A5BA3BC99249AD9D634D1252A9CA4C6BE5BDA8CA14F9C3F5B22F6C6DA715
SSDEEP 384:lVNXWfBumKokV54Mj8/bLtWVVWJLVyDBRJrGw6lx2+tN:lVNXOBurpNITQeLI1PCptN
IMP 9F19B08BA92C5E2D2FFFC1B3724649DB
PESHA1 B40D1938157201AB89D78723B020D51A90425378
PE256 6EA10B986C10A2C0350EA5D664DDE485F30392F4C2568ED3314E2D68DF69304F

DLL Exports:

Function Name Ordinal Type
NsiRegisterChangeNotification 17 Exported Function
NsiRegisterChangeNotificationEx 18 Exported Function
NsiRequestChangeNotification 19 Exported Function
NsiGetObjectSecurity 14 Exported Function
NsiGetParameter 15 Exported Function
NsiGetParameterEx 16 Exported Function
NsiRequestChangeNotificationEx 20 Exported Function
NsiSetObjectSecurity 24 Exported Function
NsiSetParameter 25 Exported Function
NsiSetParameterEx 26 Exported Function
NsiSetAllParameters 21 Exported Function
NsiSetAllParametersEx 22 Exported Function
NsiSetAllPersistentParametersWithMask 23 Exported Function
NsiDeregisterChangeNotification 4 Exported Function
NsiDeregisterChangeNotificationEx 5 Exported Function
NsiEnumerateObjectsAllParameters 6 Exported Function
NsiAllocateAndGetPersistentDataWithMaskTable 1 Exported Function
NsiAllocateAndGetTable 2 Exported Function
NsiCancelChangeNotification 3 Exported Function
NsiEnumerateObjectsAllParametersEx 7 Exported Function
NsiGetAllParameters 11 Exported Function
NsiGetAllParametersEx 12 Exported Function
NsiGetAllPersistentParametersWithMask 13 Exported Function
NsiEnumerateObjectsAllPersistentParametersWithMask 8 Exported Function
NsiFreePersistentDataWithMaskTable 9 Exported Function
NsiFreeTable 10 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: nsi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/c93062ec30d82b39f9362c80e216d122543b459829588f54262df4488c4cf705/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\WUIALoggerXml.dll 32
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\WUIALoggerXml.dll 35
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\dumpchk.exe 35
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\rtlist.exe 32
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-heap-l1-1-0.dll 38
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-math-l1-1-0.dll 35
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-multibyte-l1-1-0.dll 32
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-datetime-l1-1-0.dll 38
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-debug-l1-1-0.dll 41
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-crt-time-l1-1-0.dll 38
C:\Windows\system32\cryptbase.dll 43
C:\Windows\system32\downlevel\api-ms-win-core-shutdown-l1-1-0.dll 44
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll 43
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll 44
C:\Windows\system32\downlevel\API-MS-Win-devices-config-L1-1-0.dll 41
C:\Windows\system32\downlevel\API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll 44
C:\Windows\system32\downlevel\API-MS-Win-security-lsapolicy-l1-1-0.dll 46
C:\Windows\SysWOW64\downlevel\api-ms-win-core-heap-l1-1-0.dll 46
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll 41
C:\Windows\SysWOW64\dsrole.dll 41

MIT License. Copyright (c) 2020-2021 Strontic.