symsrv.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\symsrv.dll
  • Description: Microsoft Symbol Server

Hashes

Type Hash
MD5 265F6F5F18BF4C049875454CDCE218F6
SHA1 9C3CFEB5A24A9B2A72B19736BD523B3E31028121
SHA256 DB4D9A1A57C38AD2BCF329C58B7F35D8A90E54FAF5464E8997BCFB917E21C704
SHA384 E3E932C1BBDFFC0737394AE2DB7E7DE5F3CF73CE457DE44B2FF97388A66C0533163F3CEFAFD507F7F0DE5D268189C368
SHA512 6AB0FA48F3C19AF5929C5337A745C4F21FCB857396574625832BDD7B6A59B53A445012C8F540E1224F519D5BB085216BD5EEA2EF5503BA397BC9C28D48F1FC76
SSDEEP 6144:0J4YbjowANuQhUjXn5JQyZT6DHWN35Su:8bjoBNuOUjXne2Np
IMP A9AF4BF6AA67E3AEAB981CBAADAD33CF
PESHA1 BAA2B1384487D3D645BE9A282AFC26E2B8C4C0DC
PE256 43E7F679F5575A32469A3CFDD9A41DF1E0BCB1FD63581130CCBA1F4CB875BB73

DLL Exports:

Function Name Ordinal Type
SymbolServerPingW 11 Exported Function
SymbolServerPing 10 Exported Function
SymbolServerSetHttpAuthHeader 13 Exported Function
SymbolServerPingWEx 12 Exported Function
SymbolServerIsStoreW 9 Exported Function
SymbolServerGetSupplementW 6 Exported Function
SymbolServerGetSupplement 5 Exported Function
SymbolServerIsStore 8 Exported Function
SymbolServerGetVersion 7 Exported Function
SymbolServerW 19 Exported Function
SymbolServerStoreSupplementW 18 Exported Function
SymbolServerWithChecksumsW 31 Exported Function
SymbolServerWEx 30 Exported Function
SymbolServerStoreSupplement 17 Exported Function
SymbolServerSetOptionsW 14 Exported Function
SymbolServerSetOptions 29 Exported Function
SymbolServerStoreFileW 16 Exported Function
SymbolServerStoreFile 15 Exported Function
RunDllEntry 2 Exported Function
httpReadFile 36 Exported Function
SymbolServerByIndex 21 Exported Function
SymbolServer 20 Exported Function
httpQueryDataAvailable 35 Exported Function
httpCloseHandle 32 Exported Function
EulaDlgProc 1 Exported Function
httpOpenFileHandleW 34 Exported Function
httpOpenFileHandle 33 Exported Function
SymbolServerGetIndexStringW 26 Exported Function
SymbolServerGetIndexString 25 Exported Function
SymbolServerGetOptions 28 Exported Function
SymbolServerGetOptionData 27 Exported Function
SymbolServerDeltaNameW 4 Exported Function
SymbolServerByIndexW 23 Exported Function
SymbolServerByIndexAndChecksumsW 22 Exported Function
SymbolServerDeltaName 3 Exported Function
SymbolServerClose 24 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: symsrv.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/db4d9a1a57c38ad2bcf329c58b7f35d8a90e54faf5464e8997bcfb917e21c704/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\symproxy\symsrv.dll 97

MIT License. Copyright (c) 2020-2021 Strontic.