sdshext.dll

  • File Path: C:\Windows\system32\sdshext.dll
  • Description: Microsoft Windows Backup Shell Extension

Hashes

Type Hash
MD5 7C4394EBBB16647F5BA5AD9D418C78F2
SHA1 9FE8EF8D5B25AAAA3220B599FB951EF2240254FA
SHA256 B8951539AA986E1F5B00125C030B3243CEA8785896827958D7B2A4F325FC49F1
SHA384 DBEE01116401FB2F52877E42777038236D95C77749708DC1EBCEAC805A843A24477D1758806039B04E3916657BBDD9FA
SHA512 B80FB406BA76CB67691A94A8418DEA8B3FF908196B17B3CE398D0B1BB3F803CF6359082A41D8BD9853A882DFFF2B9516861E1F3EA2550DD4099BE664D945088F
SSDEEP 3072:AGc2GC5DaIULYJvdGK4ZNdT9pM1oJvdUeD:pvGC5DXULYJvz4yKdx
IMP A6144602C41B6C766821F3731F20F168
PESHA1 7764961712EA539A7BD023A906A8940D9260168F
PE256 081F18F3C8657540459E36B466C31A790B6D805933261DAA2232691BF89613D9

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SDSHEXT.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/b8951539aa986e1f5b00125c030b3243cea8785896827958d7b2a4f325fc49f1/detection/

MIT License. Copyright (c) 2020-2021 Strontic.