wincredprovider.dll

File Path: C:\Windows\SysWOW64\wincredprovider.dll
Description: wincredprovider DLL

Hashes

Type	Hash
MD5	`01216DB296BCC6E7E0967BE6A4C2A9B2`
SHA1	`9AB56C8FC41E2B0B8663DD530B5C5054C6B98F47`
SHA256	`0476B5322127A483DF78BC55CF31756617D55AFBBE707242FC8793A462A4E269`
SHA384	`0BB45F950C81401897CEF08A35CA523054B43E5D6578E8EFA325D5E7D63ED68146CFF0EE19D0B0DC6C741A991364C139`
SHA512	`3A3BA0B3C7F85D178BAC130BAE3BE214408CE2AC700B1F20F1B7C9FC87FB2B77972658E071B4A38A79034289CBC908C9739983657864AF4B4C2377BC2994B95B`
SSDEEP	`768:7rC2o2BhcvOPwgXL+J6+efbaWbaWJuGlqesRtgjEav:7FoJOPwgXL+J6Vf6WJblqP6`
IMP	`A65382E77F7924BEDEB0ECB21521F0E9`
PESHA1	`A72538AC878F6F5CF224519C2F5895BBF7C84652`
PE256	`1DC1DF031F6FFBB600320F276525F4794D9AE48F3EEC3C6B7EF747888C2F5B29`

DLL Exports:

Function Name	Ordinal	Type
`DllRegisterServer`	3	Exported Function
`DllUnregisterServer`	4	Exported Function
`DllCanUnloadNow`	1	Exported Function
`DllGetClassObject`	2	Exported Function

Signature

Status: Signature verified.
Serial: 330000026551AE1BBD005CBFBD000000000265
Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: wincredprovider.dll
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/70
VirusTotal Link: https://www.virustotal.com/gui/file/0476b5322127a483df78bc55cf31756617d55afbbe707242fc8793a462a4e269/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\wincredprovider.dll	29
C:\Windows\SysWOW64\adprovider.dll	38
C:\Windows\SysWOW64\dpapiprovider.dll	35

MIT License. Copyright (c) 2020-2021 Strontic.