recovery.dll

  • File Path: C:\Windows\system32\recovery.dll
  • Description: Recovery Control Panel

Hashes

Type Hash
MD5 701251FFD239D40D80C0352C27E8A92E
SHA1 55246724814ACFB3C2B972252BAA3784D5A23F18
SHA256 1B9A7FFD5E7E29A638DE64977AC2E8B4B3BD2334EA761C9773A1D4C45B115DA3
SHA384 900F481C54C6CCF1BF8C2808972195A41C61FC8BCF0447F8FBC2A87CF0EB2EDBD1A9207E434BF35A24F1B66506F3C89A
SHA512 DDE72F9BB6E65FA12D4768797C7F2635D3578F530B900A05BC55373CDBDCFD0B09D184783B5754E4D1192524DFE49D7F151AB462664B8D5F1DC31E063554ACBC
SSDEEP 3072:gBJO4rLxVfsQ1vJ1w2pLtnKsED2UDotutuniweiiJD43:gfXLjp5J1w2pLtnKsBS
IMP E55945011FDE37B6836CEE609C18A8F4
PESHA1 03578F9331ADD57F34ABB073EA9DB98873796D61
PE256 521406870FEAA20957A9B4EAFEBDBCE8FD653C9B60E660E2B0D9D0122955829C

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RECOVERY.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/1b9a7ffd5e7e29a638de64977ac2e8b4b3bd2334ea761c9773a1d4c45b115da3/detection/

MIT License. Copyright (c) 2020-2021 Strontic.