pwrshsip.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
Crypto SIP provider for signing and verifying PowerShell script files (.ps1/.ps1xml)
Authors
© Microsoft Corporation. All rights reserved.
File size
30.0 KB
Uploaded
2025-12-01 07:52
Views
81
SHA-256
31648c3363fecfdb61e14c2717ddc952

Exported functions 8

PsCreateHash #1 · 0x48a0
PsDelSignature #2 · 0x4a00
PsGetSignature #3 · 0x4710
PsIsMyFileType #4 · 0x4ae0
PsPutSignature #5 · 0x47e0
PsVerifyHash #6 · 0x4940
DllRegisterServer #7 · 0x4c00
DllUnregisterServer #8 · 0x4d30

Imported DLLs & functions 54

ADVAPI32.dll 7
CryptAcquireContextW 0x180006218
CryptCreateHash 0x180006200
CryptDestroyHash 0x180006208
CryptGetHashParam 0x1800061f0
CryptGetProvParam 0x1800061e8
CryptHashData 0x1800061f8
CryptReleaseContext 0x180006210
CRYPT32.dll 7
CertOIDToAlgId 0x180006230
CryptBinaryToStringW 0x180006248
CryptEncodeObject 0x180006238
CryptFindOIDInfo 0x180006228
CryptSIPAddProvider 0x180006250
CryptSIPRemoveProvider 0x180006258
CryptStringToBinaryW 0x180006240
KERNEL32.dll 25
CloseHandle 0x180006270
CreateFileW 0x180006278
GetCurrentProcess 0x1800062c0
GetCurrentProcessId 0x180006310
GetCurrentThreadId 0x180006318
GetFileSizeEx 0x180006280
GetLastError 0x180006268
GetModuleFileNameW 0x1800062f8
GetSystemTimeAsFileTime 0x180006320
GetTickCount 0x180006328
MultiByteToWideChar 0x1800062b0
QueryPerformanceCounter 0x180006308
ReadFile 0x180006298
RtlCaptureContext 0x1800062f0
RtlLookupFunctionEntry 0x1800062e8
RtlVirtualUnwind 0x1800062e0
SetEndOfFile 0x180006288
SetFilePointerEx 0x180006290
SetLastError 0x1800062c8
SetUnhandledExceptionFilter 0x1800062d0
Sleep 0x180006300
TerminateProcess 0x1800062b8
UnhandledExceptionFilter 0x1800062d8
WideCharToMultiByte 0x1800062a8
WriteFile 0x1800062a0
msvcrt.dll 15
__C_specific_handler 0x180006370
_amsg_exit 0x180006380
_callnewh 0x180006358
_initterm 0x180006378
_purecall 0x180006338
_wcsicmp 0x180006388
_XcptFilter 0x180006390
free 0x180006348
malloc 0x180006350
memcmp 0x180006398
memcpy 0x1800063a0
memset 0x180006360
wcscmp 0x1800063a8
wcsncmp 0x180006368
wcsrchr 0x180006340