sdengin2.dll

  • File Path: C:\Windows\system32\sdengin2.dll
  • Description: Microsoft Windows Backup Engine

Hashes

Type Hash
MD5 75EB18C3C5AB6313ED4673A7DE051603
SHA1 65E293A55C0F866CA476A6D6EE57D75F8ACFE8FD
SHA256 FE5855FA70AEFA8DF6C2AC94343F7BF44384BA1CC0CF4CF72C5574B95E467797
SHA384 F97C87182C0DAE13A4A1FF764D28AAF34010B972093A095E00B1D5A7D6B1F0E3CC4687F85B926D7B008081209750028B
SHA512 853E693EC98E7497328195CAF12B60D374CACF562B740590F0DD93237F317E92B9B12AA5EA7820D53C924F94C6EB20684145A5C34B2548451EB6EFB42D61B0C9
SSDEEP 24576:m2ien0RWScQQpCl/59b+MIb9tewpwsZRorU2efJkarL5U1JbQfIxoBZMj3UA0:m2ien0RWScQQclqMIb/ewpwcaYHjrL5D
IMP C6CCA81ABA9BDEBA2E95C811BC3D709C
PESHA1 AA85FAFBF42DA7E64B58AFC26879BEEF7913BF28
PE256 8C3727120C5E5D5729B13D48DAE49284F4E59C5F5522E27E4BB7B94FBDF968DB

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 6 Exported Function
ExecuteScheduledBackup 1 Exported Function
SdCheck 7 Exported Function
DllRegisterServer 5 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetActivationFactory 3 Exported Function
DllGetClassObject 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SDENGINE.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/fe5855fa70aefa8df6c2ac94343f7bf44384ba1cc0cf4cf72c5574b95e467797/detection/

MIT License. Copyright (c) 2020-2021 Strontic.