winrnr.dll
- File Path:
C:\Windows\SysWOW64\winrnr.dll
- Description: LDAP RnR Provider DLL
Hashes
| Type |
Hash |
| MD5 |
C8E76561ACBFBD485CACC8BFB0394602 |
| SHA1 |
F1AC95CA0D9F8F4EFB109BB040D091D0504FFC47 |
| SHA256 |
1360C678ED110E378F3D79537426C3C63D62C49F93035BF5629F9E65EBE88780 |
| SHA384 |
89F1D47FB180D8978AB0BBD0240E1414FE167AFE2CE45B9AE1B8E8E5384952C8CDC635BAE64C9D1AAECEC1E449752FFD |
| SHA512 |
F02F82FA2AE5B4D99AD04C269F9572A808D91A2086FDA693587996C1918F2450003D765A08B5B0268F00290ADAF108FD420ADE7A74508F7ECC13BD3913E6FFCA |
| SSDEEP |
768:S3ydy03G9Mb9oS9CxCF2FwwEu0EJ10Wri:Qydz3G98SS9QFwwr0q10R |
| IMP |
A877CCF0DA012C50FA229FD0E0E30507 |
| PESHA1 |
787F341B41F004CEEA2F75A674440CDBF884FEC3 |
| PE256 |
7958C71A79F00FC7A9B4F8F5833587CB7D663A04E417F4999FD86B06E56E214C |
DLL Exports:
| Function Name |
Ordinal |
Type |
RemoveNTDSProvider |
3 |
Exported Function |
NSPStartup |
2 |
Exported Function |
InstallNTDSProvider |
1 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: winrnr
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/1360c678ed110e378f3d79537426c3c63d62c49f93035bf5629f9e65ebe88780/detection/
MIT License. Copyright (c) 2020-2021 Strontic.