ntmarta.dll

File Path: C:\Windows\SysWOW64\ntmarta.dll
Description: Windows NT MARTA provider

Hashes

Type	Hash
MD5	`EE74A15F336E5637C83169040DC68610`
SHA1	`2E94E3AD0AE4872DE797EF949AA5DE2DFA283C38`
SHA256	`C2A3CFFBE49F55CB0763F974491DFD5492E82D5E11C3BE1A832B7C4E213B1688`
SHA384	`2FDB7D55DEFC180E87BDCF0157B383204F7ECB003F9DADAA21BB5F2E491D2410AC51A18F61C83E804A3C75E24AFAAE0A`
SHA512	`8A01D7A6748438FC5EA84BE4A23A780B2143E28435918E80F3A2A6931D52B066030D0128816E754DFC7390F251E1DCBFCAD80F4DD87602336E5C25FFD171F6C0`
SSDEEP	`3072:ZoBQUzjEYqsRouZ4Lb3mE0hVaJXCCZHQD0lmI7RmH/fvj:GBS8RouZcb350h8JSCtQD0NRkfj`
IMP	`3E5BAEBFCE82E676843228A19BC7AF54`
PESHA1	`CD58EB3D96CD09356F6C68830961414E92EF25D5`
PE256	`9D8D5C505EAB8D0BF60B44669B00A5AA017CB19BBCFEE878228C93991929F127`

DLL Exports:

Function Name	Ordinal	Type
`AccRewriteGetExplicitEntriesFromAcl`	35	Exported Function
`AccProvSetAccessRights`	34	Exported Function
`AccProvRevokeAuditRights`	33	Exported Function
`AccRewriteSetEntriesInAcl`	38	Exported Function
`AccRewriteGetNamedRights`	37	Exported Function
`AccRewriteGetHandleRights`	36	Exported Function
`AccProvHandleSetAccessRights`	29	Exported Function
`AccProvHandleRevokeAuditRights`	28	Exported Function
`AccProvHandleRevokeAccessRights`	27	Exported Function
`AccProvRevokeAccessRights`	32	Exported Function
`AccProvIsObjectAccessible`	31	Exported Function
`AccProvIsAccessAudited`	30	Exported Function
`AccRewriteSetHandleRights`	39	Exported Function
`GetSecurityInfo`	47	Exported Function
`GetNamedSecurityInfoW`	46	Exported Function
`GetMartaExtensionInterface`	2	Exported Function
`SetSecurityInfo`	50	Exported Function
`SetNamedSecurityInfoW`	49	Exported Function
`SetEntriesInAclW`	48	Exported Function
`AccTreeResetNamedSecurityInfo`	42	Exported Function
`AccSetEntriesInAList`	41	Exported Function
`AccRewriteSetNamedRights`	40	Exported Function
`GetExplicitEntriesFromAclW`	45	Exported Function
`EventNameFree`	44	Exported Function
`EventGuidToName`	43	Exported Function
`AccGetInheritanceSource`	11	Exported Function
`AccGetExplicitEntries`	10	Exported Function
`AccGetAccessForTrustee`	9	Exported Function
`AccLookupAccountTrustee`	14	Exported Function
`AccLookupAccountSid`	13	Exported Function
`AccLookupAccountName`	12	Exported Function
`AccConvertAccessToSecurityDescriptor`	5	Exported Function
`AccConvertAccessToSD`	4	Exported Function
`AccConvertAccessMaskToActrlAccess`	3	Exported Function
`AccFreeIndexArray`	8	Exported Function
`AccConvertSDToAccess`	7	Exported Function
`AccConvertAclToAccess`	6	Exported Function
`AccProvCancelOperation`	15	Exported Function
`AccProvHandleGetTrusteesAccess`	24	Exported Function
`AccProvHandleGetAllRights`	23	Exported Function
`AccProvHandleGetAccessInfoPerObjectType`	22	Exported Function
`AccProvHandleIsObjectAccessible`	26	Exported Function
`AccProvHandleIsAccessAudited`	25	Exported Function
`AccProvHandleGrantAccessRights`	1	Exported Function
`AccProvGetCapabilities`	18	Exported Function
`AccProvGetAllRights`	17	Exported Function
`AccProvGetAccessInfoPerObjectType`	16	Exported Function
`AccProvGrantAccessRights`	21	Exported Function
`AccProvGetTrusteesAccess`	20	Exported Function
`AccProvGetOperationResults`	19	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: ntmarta.dll
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/71
VirusTotal Link: https://www.virustotal.com/gui/file/c2a3cffbe49f55cb0763f974491dfd5492e82d5e11c3be1a832b7c4e213b1688/detection/