pkeyhelper.dll

  • File Path: C:\Windows\system32\pkeyhelper.dll
  • Description: Product Key Helper

Hashes

Type Hash
MD5 47766F7DFA19FD18AE03700C1F4CEBA6
SHA1 44C274AE63DBF5ED54D97ADC8B181CC895B80636
SHA256 B7011DEAAA668852DE877236E1FB8351459C0F9A11B707646CD27C4CC9805DDF
SHA384 7ABEDFD36E9FF18CAC385D89F4AEC6A46DC18B209F35E6A0DCC25870A8B1E228AE039CE807043A221B87C7F36231E95D
SHA512 D28C7F27F58DB9869BB1FE7D80DDC6D656DEDBD9BD1DF17DE0747DD53E95815C7F0D7198FDE69DCBD1623547A4DA3F778B160F03D2666CC4A68B173A8E4711F7
SSDEEP 3072:FnjK0fbMsG6qtJNfvVAPvYls/WArEqBHckM3f7iUXmnflBK6pBKOs8BiFQBKOQBZ:1jKhvpHFdONEUckM3fL3+zjW4q
IMP 5478082DFF7E513DD7F41A9642C62090
PESHA1 B3F39767CE49A8D569C0F62AB90146BAF6F0717A
PE256 B75F394D759E32D39CD0836A4740BE4E44809355A57BF06F8541E578D3241554

DLL Exports:

Function Name Ordinal Type
SkuGetProductKeyForEdition 9 Exported Function
IsDefaultPKey 8 Exported Function
GetVirtualEditionsForCompositionEdition 7 Exported Function
SkuGetUpgradeProductKeyFromDownlevelEdition 12 Exported Function
SkuGetUpgradeProductKeyEx 11 Exported Function
SkuGetUpgradeProductKey 10 Exported Function
GetDefaultProductKeyForPfn 3 Exported Function
GetCompositionEditionForVirtualEdition 2 Exported Function
GetBootPolicySetForEdition 1 Exported Function
GetProductKeyFromContentId 6 Exported Function
GetEditionNameFromId 5 Exported Function
GetEditionIdFromName 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: pkeyhelper.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/b7011deaaa668852de877236e1fb8351459c0f9a11b707646cd27c4cc9805ddf/detection/

MIT License. Copyright (c) 2020-2021 Strontic.