winipsec.dll

  • File Path: C:\Windows\system32\winipsec.dll
  • Description: Windows IPsec SPD Client DLL

Hashes

Type Hash
MD5 48362C4328C0A11BF8C41A370CF668AB
SHA1 6B1CC40C9AE8DA68565111EF47EB5938A49EF409
SHA256 CEF3C30C2C2B2D7407B4A877ABB0B87F2AEDA6B206B6FF3DA2AD7790949B2B60
SHA384 5138415AD197F32A33E8472116A5CA2F66F75960B632E8327EFF8480B60FB1D6C39BB8374EDC343B6427838216716E8B
SHA512 9C5EE4543708F410DCED5F2E24EC63BA5DE361FD4EE1534E6A99D924A1B54656ED241B9242A280D7B92502DE4157EE462253155AF263A5BA689E3AC784272C7F
SSDEEP 1536:xx9RHEoZ+Q4smryyBHXva2Y/UXhkD43kpHyt+W+dnKgYv8:H9RHSQZmJdycXhks0pqgu8
IMP F9D309523108B05644323D0F1CFBF2A1
PESHA1 50F3525386E42D1AEBF9AF546F5A2F02B7963ACC
PE256 DB3661E1739614332F6E58E8E6B97DEBC872660198E899A37FD62E697217D38A

DLL Exports:

Function Name Ordinal Type
MatchTransportFilter 44 Exported Function
MatchTransportFilterEx 95 Exported Function
MatchMMFilter 43 Exported Function
MatchMMFilterEx 89 Exported Function
MatchTunnelFilter 68 Exported Function
OpenTransportFilterHandle 71 Exported Function
OpenTransportFilterHandleEx 90 Exported Function
OpenMMFilterHandle 69 Exported Function
OpenMMFilterHandleEx 84 Exported Function
GetMMPolicyByID 46 Exported Function
GetQMPolicy 32 Exported Function
GetMMFilterEx 88 Exported Function
GetMMPolicy 37 Exported Function
GetQMPolicyByID 45 Exported Function
GetTunnelFilter 67 Exported Function
InitiateIKENegotiation 52 Exported Function
GetTransportFilter 27 Exported Function
GetTransportFilterEx 94 Exported Function
SetMMPolicy 36 Exported Function
SetQMPolicy 31 Exported Function
SetMMFilter 41 Exported Function
SetMMFilterEx 87 Exported Function
SetTransportFilter 26 Exported Function
SPDApiBufferAllocate 21 Exported Function
SPDApiBufferFree 22 Exported Function
SetTransportFilterEx 93 Exported Function
SetTunnelFilter 66 Exported Function
QueryIKENotifyData 59 Exported Function
QueryIKEStatistics 56 Exported Function
OpenTunnelFilterHandle 73 Exported Function
QueryIKENegotiationStatus 53 Exported Function
QueryIPSecStatistics 61 Exported Function
SetConfigurationVariables 79 Exported Function
SetMMAuthMethods 50 Exported Function
QuerySpdPolicyState 80 Exported Function
RegisterIKENotifyClient 58 Exported Function
GetMMFilter 42 Exported Function
CloseMMFilterHandle 70 Exported Function
CloseTransportFilterHandle 72 Exported Function
CloseIKENegotiationHandle 54 Exported Function
CloseIKENotifyHandle 60 Exported Function
CloseTunnelFilterHandle 74 Exported Function
DeleteMMPolicy 34 Exported Function
DeleteMMSAs 57 Exported Function
DeleteMMAuthMethods 48 Exported Function
DeleteMMFilter 39 Exported Function
AddMMFilterEx 85 Exported Function
AddMMPolicy 33 Exported Function
AddMMAuthMethods 47 Exported Function
AddMMFilter 38 Exported Function
AddQMPolicy 28 Exported Function
AddTransportFilterEx 91 Exported Function
AddTunnelFilter 63 Exported Function
AddSAs 76 Exported Function
AddTransportFilter 23 Exported Function
EnumQMPolicies 30 Exported Function
EnumQMSAs 62 Exported Function
EnumMMPolicies 35 Exported Function
EnumMMSAs 55 Exported Function
EnumTransportFilters 25 Exported Function
GetConfigurationVariables 78 Exported Function
GetMMAuthMethods 51 Exported Function
EnumTransportFiltersEx 92 Exported Function
EnumTunnelFilters 65 Exported Function
DeleteTransportFilter 24 Exported Function
DeleteTunnelFilter 64 Exported Function
DeleteQMPolicy 29 Exported Function
DeleteQMSAs 77 Exported Function
DllMain 20 Exported Function
EnumMMFilters 40 Exported Function
EnumMMFiltersEx 86 Exported Function
EnumIPSecInterfaces 75 Exported Function
EnumMMAuthMethods 49 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: winipsec.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/cef3c30c2c2b2d7407b4a877abb0b87f2aeda6b206b6ff3da2ad7790949b2b60/detection/

MIT License. Copyright (c) 2020-2021 Strontic.