pwrshsip.dll

v10.0.19041.3636 32-bit Windows NT Analyzed
Download
Description
Crypto SIP provider for signing and verifying PowerShell script files (.ps1/.ps1xml)
Authors
© Microsoft Corporation. All rights reserved.
File size
22.5 KB
Uploaded
2025-12-01 08:11
Views
51
SHA-256
4533e1887e9e4bc64ea6e4db5d22b787

Exported functions 8

PsCreateHash #1 · 0x44c0
PsDelSignature #2 · 0x4590
PsGetSignature #3 · 0x43d0
PsIsMyFileType #4 · 0x4600
PsPutSignature #5 · 0x4450
PsVerifyHash #6 · 0x4520
DllRegisterServer #7 · 0x46d0
DllUnregisterServer #8 · 0x47c0

Imported DLLs & functions 50

ADVAPI32.dll 7
CryptAcquireContextW 0x10007018
CryptCreateHash 0x10007010
CryptDestroyHash 0x10007000
CryptGetHashParam 0x10007004
CryptGetProvParam 0x1000700c
CryptHashData 0x10007008
CryptReleaseContext 0x10007014
CRYPT32.dll 7
CertOIDToAlgId 0x10007024
CryptBinaryToStringW 0x10007030
CryptEncodeObject 0x10007028
CryptFindOIDInfo 0x10007020
CryptSIPAddProvider 0x10007034
CryptSIPRemoveProvider 0x10007038
CryptStringToBinaryW 0x1000702c
KERNEL32.dll 22
CloseHandle 0x10007044
CreateFileW 0x10007048
GetCurrentProcess 0x1000706c
GetCurrentProcessId 0x10007094
GetCurrentThreadId 0x10007084
GetFileSizeEx 0x1000704c
GetLastError 0x10007040
GetModuleFileNameW 0x10007088
GetSystemTimeAsFileTime 0x10007080
GetTickCount 0x1000707c
MultiByteToWideChar 0x10007064
QueryPerformanceCounter 0x10007090
ReadFile 0x10007058
SetEndOfFile 0x10007050
SetFilePointerEx 0x10007054
SetLastError 0x10007070
SetUnhandledExceptionFilter 0x10007074
Sleep 0x1000708c
TerminateProcess 0x10007068
UnhandledExceptionFilter 0x10007078
WideCharToMultiByte 0x10007060
WriteFile 0x1000705c
msvcrt.dll 14
_amsg_exit 0x100070c0
_callnewh 0x100070ac
_except_handler4_common 0x100070b8
_initterm 0x100070bc
_purecall 0x100070a4
_wcsicmp 0x100070b0
_XcptFilter 0x100070c8
free 0x100070c4
malloc 0x100070a8
memcmp 0x100070cc
memcpy 0x100070a0
memset 0x100070d0
wcsncmp 0x100070b4
wcsrchr 0x1000709c