wininitext.dll

  • File Path: C:\Windows\SysWOW64\wininitext.dll
  • Description: WinInit Utility Extension DLL

Hashes

Type Hash
MD5 E5CC40843980906957B41DE0167808B4
SHA1 9FD8F5A85DAE4EF9174F58811F1B2A45A59D1114
SHA256 10989611EB754EFB12BD0B65A34F83500153205EFBF6442C56BD5DD831767994
SHA384 0B18857AB6BAB22B46BFD22294E9FB31FAA5F2B378F3DD54A6DEB19414667BAE345108DF4473522AEE9B392A11C3CCCB
SHA512 690AB6BC0F3A99CB1779884100F81B74838E41FAC64789CEA2B4B407C4DDDAF503992FD0A15DC6926F1B031A8961F6501A1724ECFDE192577E9A35FD9833AD83
SSDEEP 384:AF8DFwro0YZzd96kkEZoIijkiKsw3dY9nHPa+EtEsbzRtfAc3w/g+WHaWVwvrD1C:ZFl1zyEZo3AZgvar5bzLDw/OeFI1Pegn
IMP 60CFA6515B0D69C1DCCFCA11AD720E39
PESHA1 746D7539D4481134D28A0C0A0CCDB55741429AC7
PE256 98420DA183746C89A9A0839003D23746E4DA18FAE5E7C8FC99F7B9767A3675BE

DLL Exports:

Function Name Ordinal Type
UIStartupWorker 4 Exported Function
WaitForWinstationShutdown 5 Exported Function
WinStationSystemShutdownStartedWorker 6 Exported Function
GetLoggedOnUserCount 1 Exported Function
PrimaryTerminalAndHookWorker 2 Exported Function
StartLoadingFontsWorker 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WinInitExt.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/10989611eb754efb12bd0b65a34f83500153205efbf6442c56bd5dd831767994/detection/

MIT License. Copyright (c) 2020-2021 Strontic.