home

bcrypt.dll

Windows Cryptographic Primitives Library

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Windows Cryptographic Primitives Library

 
Part of the Windows Operating System

Version:
10.0.10240.16387 (th1_st1.150711-1429)

MD5:
b07daf38265249d61a840f95bf0f380b

SHA-1:
adead379a65a3733f163b0383d8cd7ae55737b04

SHA-256:
f044e8627f3ea89fc4ceb1736c6363040f071d91e48189763c957e016aeb7dfc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/28/2024 12:07:05 AM UTC  (today)

File size:
153.9 KB (157,560 bytes)

Product version:
10.0.10240.16387

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
bcrypt.dll.mui

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\bcrypt.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
2/11/2015 12:08:12 AM

Valid to:
5/11/2016 12:08:12 AM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000007AC8EB9FE6137D67E100000000007A

File PE Metadata
Compilation timestamp:
7/12/2015 5:54:45 AM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
12.10

CTPH (ssdeep):
3072:YGyY66KJ5d+bUuTa+KQ8UTTck/LYXc78O9:XyY6GYuTbF8igfXk9

Entry address:
0x140C0

Entry point:
48, 89, 5C, 24, 10, 57, 48, 83, EC, 30, 48, 89, 0D, 0F, F6, 00, 00, 49, 8B, D8, 48, 8B, F9, 83, FA, 01, 0F, 85, 06, 01, 00, 00, FF, 15, 92, A1, 00, 00, 4C, 8B, C3, BA, 01, 00, 00, 00, 48, 8B, CF, E8, 6E, 77, FF, FF, E8, C1, D8, FE, FF, 48, 8D, 05, CE, B1, 00, 00, 48, C7, 05, AB, F5, 00, 00, 01, 00, 00, 00, 48, 89, 05, 7C, F5, 00, 00, 33, DB, 48, 8D, 05, 83, F5, 00, 00, 48, 89, 1D, 8C, F5, 00, 00, 48, 89, 05, E5, EE, 00, 00, 48, 89, 1D, 6E, F5, 00, 00, E8, D5, DB, FE, FF, E8, A4, DC, FE, FF, E8, 73, E2, FE...
 
[+]

Entropy:
6.4200

Code size:
114 KB (116,736 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.