winrnr.dll
- File Path:
C:\Windows\system32\winrnr.dll
- Description: LDAP RnR Provider DLL
Hashes
| Type |
Hash |
| MD5 |
468CC283C5ECF70AFD86B84DF7D52F23 |
| SHA1 |
8FBABBA736FBA40473C10A50622131E276C59E20 |
| SHA256 |
2CBF2ECB536F9F2CE3D8BF58C7270A687D6CB41A2505AEE33813908C1730C526 |
| SHA384 |
12CBEA0CE149CAD739A0993D6A253BD523F4A67A7D245C9EAA70600951A2418663A122CC4A28B9B4F95506AA2F998AA9 |
| SHA512 |
8C7BEB3F54BF7E15DD8C83CBD684887BD1C4AC02610ED6A93C123CD4DF13F008B39B63FB8F1BA66EF543FD5C481A4D16B503F86D6C6F55CAFF919E7BEB7BECE2 |
| SSDEEP |
768:ERcNM1WENNTs8h01dt7xwH7gK7jqxVw44JBzeOIL/9:Ir17Ts8oV2DNDzeOIh |
| IMP |
DEA70A627F0E56AA99E3D9BA920C9ED8 |
| PESHA1 |
36866557FA95F210A34A6353B6F8CB3C364EAC92 |
| PE256 |
68D037BC59C19632C47AB8A84E400FD0E54ED7DD650C6890B05178A608063E91 |
DLL Exports:
| Function Name |
Ordinal |
Type |
RemoveNTDSProvider |
3 |
Exported Function |
NSPStartup |
2 |
Exported Function |
InstallNTDSProvider |
1 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: winrnr
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/67
- VirusTotal Link: https://www.virustotal.com/gui/file/2cbf2ecb536f9f2ce3d8bf58c7270a687d6cb41a2505aee33813908c1730c526/detection/
MIT License. Copyright (c) 2020-2021 Strontic.