pwrshsip.dll
- File Path:
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll
- Description: Crypto SIP provider for signing and verifying PowerShell script files (.ps1/.ps1xml)
Hashes
| Type |
Hash |
| MD5 |
628F943B740E0697A824A8EE169FD22B |
| SHA1 |
97DF543F1B09DB0C9EEF10AC52BD5EB8D7CEE366 |
| SHA256 |
AAC6E5414CAA898485E8CA60710CD536EBC2DFEC379DAAC017E371CABF4FE742 |
| SHA384 |
CAA6E386AAD0C8D7513D50983B642BA3C881DF3B0E7E4360F50B4610DEB033DF75EAB60620CFCF66D900DCAE43F6F51E |
| SHA512 |
7CE9867914B5BAD24B08D94B602C53E0C4E6D365EE3E304A10889EA93111E799A5886ABC87599E582904CB928BF16BCEB39837F13443E96F232D5FF38E1305FF |
| SSDEEP |
384:qg9tZh3a4BevS1ontymN1ghqj/kiC0eFSSnb/VRtodaFGhW4FW7Zl:PtZhPEq1cyoJ/beFSyXG9 |
| IMP |
04A6A1BA928D8906560D6EB0850BEB10 |
| PESHA1 |
80DBBDC19DE38029382DBDF033396E8AFE5BFA7D |
| PE256 |
89E6CC2385D9B7C0F871A4EF313EC6A4C37E17118DE3DD6F42560BF1877E9069 |
DLL Exports:
| Function Name |
Ordinal |
Type |
PsIsMyFileType |
4 |
Exported Function |
PsGetSignature |
3 |
Exported Function |
PsVerifyHash |
6 |
Exported Function |
PsPutSignature |
5 |
Exported Function |
DllUnregisterServer |
8 |
Exported Function |
DllRegisterServer |
7 |
Exported Function |
PsDelSignature |
2 |
Exported Function |
PsCreateHash |
1 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: pwrshsip.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/aac6e5414caa898485e8ca60710cd536ebc2dfec379daac017e371cabf4fe742/detection/
MIT License. Copyright (c) 2020-2021 Strontic.