» bcryptprimitives.dll
Overview
Analysis
File Details

bcryptprimitives.dll

Windows Cryptographic Primitives Library

Microsoft Corporation

It is installed with Windows 7.

File name:

bcryptprimitives.dll

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Windows® Operating System

Description:

Windows Cryptographic Primitives Library

Part of the Windows 7 (with Service Pack 1) Operating System

Version:

6.1.7601.17514 (win7sp1_rtm.101119-1850)

MD5:

f12f8adb466ebbf2e94a72b6c5d3c08d

SHA-1:

74070443a0935957e4d7df7e2d2cfc52c73eeaec

SHA-256:

64856f2a75c88a1bb25422c722bc88e537ffd88e7adaa05d879855b96c1d06b5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/26/2024 10:51:27 AM UTC (today)

File size:

298.6 KB (305,816 bytes)

Product version:

6.1.7601.17514

Original file name:

bcryptprimitives.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Windows\System32\bcryptprimitives.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

12/7/2009 1:57:44 PM

Valid to:

3/7/2011 1:57:44 PM

Subject:

CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6115346400000000000C

File PE Metadata

Compilation timestamp:

11/20/2010 12:59:27 AM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

6144:QqqDL62P+K3ijcYOkjq7BZ+YO579QtRw0MakblhFEKGR7o99xZTxWM:Vqn62P+qv+9QtRw0M8KS7c9

Entry address:

0xA55C

Entry point:

48, 8B, C4, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 48, 83, EC, 28, 8B, C2, 48, 89, 0D, A9, DE, 03, 00, 83, F8, 01, 75, 5B, 4C, 8B, 44, 24, 40, E8, 12, 73, 01, 00, 4C, 63, 1D, AF, 5A, FF, FF, 48, 8D, 05, CA, 5A, FF, FF, 41, F6, 04, 03, 80, 75, 07, 33, C0, E9, D7, 00, 00, 00, B9, EF, BE, AD, DE, 45, 33, C9, 45, 33, C0, 48, 8B, D1, E8, 6B, 54, 00, 00, E8, 2E, FE, FF, FF, 85, C0, 79, 0D, B9, 4F, 05, 00, 00, FF, 15, 4F, 6A, FF, FF, EB, D0, C6, 05, 4A, DE, 03, 00, 01, E9, 9D, 00, 00, 00, 85, C0, 75, 6E, 8B... 
[+]

Entropy:

6.5307

Code size:

260.5 KB (266,752 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.