¿Para qué sirve la dll cryptdll.dll?

Cryptography Manager

Dependencias de la dll cryptdll.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\cryptdll.dll

File Type: DLL

  Image has the following dependencies:

    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    api-ms-win-crt-string-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    bcrypt.dll

  Summary

        2000 .data
        1000 .didat
        1000 .pdata
        5000 .rdata
        1000 .reloc
        1000 .rsrc
        9000 .text

Funciones que tiene la dll cryptdll.dll


1    0 000012E0 CDBuildIntegrityVect
2    1 000012A0 CDBuildVect
3    2 00001610 CDFindCommonCSystem
4    3 00001690 CDFindCommonCSystemWithKey
5    4 00001740 CDGenerateRandomBits
6    5 00001350 CDGetIntegrityVect
7    6 000015D0 CDLocateCSystem
8    7 000018B0 CDLocateCheckSum
9    8 000017C0 CDLocateRng
10    9 00001220 CDRegisterCSystem
11    A 00001850 CDRegisterCheckSum
12    B 00001770 CDRegisterRng
13    C 000018F0 HMACwithSHA
14    D 00001AE0 KRBFXCF2
15    E          MD5Final (forwarded to NTDLL.MD5Final)
16    F          MD5Init (forwarded to NTDLL.MD5Init)
17   10          MD5Update (forwarded to NTDLL.MD5Update)
18   11 00001A50 PBKDF2
19   12 00002AA0 aesCTSDecryptMsg
20   13 000029A0 aesCTSEncryptMsg

Información avanzada sobre funciones que tiene la dll cryptdll.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\cryptdll.dll

File Type: DLL

  Section contains the following exports for cryptdll.dll

    00000000 characteristics
    8CAD9CB2 time date stamp
        0.00 version
           1 ordinal base
          20 number of functions
          20 number of names

    ordinal hint RVA      name

          1    0 000012E0 CDBuildIntegrityVect
          2    1 000012A0 CDBuildVect
          3    2 00001610 CDFindCommonCSystem
          4    3 00001690 CDFindCommonCSystemWithKey
          5    4 00001740 CDGenerateRandomBits
          6    5 00001350 CDGetIntegrityVect
          7    6 000015D0 CDLocateCSystem
          8    7 000018B0 CDLocateCheckSum
          9    8 000017C0 CDLocateRng
         10    9 00001220 CDRegisterCSystem
         11    A 00001850 CDRegisterCheckSum
         12    B 00001770 CDRegisterRng
         13    C 000018F0 HMACwithSHA
         14    D 00001AE0 KRBFXCF2
         15    E          MD5Final (forwarded to NTDLL.MD5Final)
         16    F          MD5Init (forwarded to NTDLL.MD5Init)
         17   10          MD5Update (forwarded to NTDLL.MD5Update)
         18   11 00001A50 PBKDF2
         19   12 00002AA0 aesCTSDecryptMsg
         20   13 000029A0 aesCTSEncryptMsg

  Summary

        2000 .data
        1000 .didat
        1000 .pdata
        5000 .rdata
        1000 .reloc
        1000 .rsrc
        9000 .text

Integridad de la dll cryptdll.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          E2B32B64EEED88F071E7BFBE6C8F95FD290D95DFD6DB35CFDFE1E1BE6CF2B8DA       C:\Windows\System32\cryptdll.dll             


Detalles sobre el fichero dll cryptdll.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\cryptdll.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : cryptdll.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\cryptdll.dll
                    InternalName:     cryptdll.dll
                    OriginalFilename: cryptdll.dll
                    FileVersion:      10.0.19041.546 (WinBuild.160101.0800)
                    FileDescription:  Cryptography Manager
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.546
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : cryptdll
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-cryptdll-dll_31bf3856ad364e35_10.0.19041.546_none_e397cce70c94bb9c\cr
                    yptdll.dll}
LinkType          : HardLink
Name              : cryptdll.dll
Length            : 67728
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\cryptdll.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:44:12
CreationTimeUtc   : 21/11/2020 7:44:12
LastAccessTime    : 03/12/2020 9:26:18
LastAccessTimeUtc : 03/12/2020 8:26:18
LastWriteTime     : 21/11/2020 8:44:12
LastWriteTimeUtc  : 21/11/2020 7:44:12
Attributes        : Archive



Procesos que utilizan la dll cryptdll.dll


RuntimeBroker
SearchApp
sihost
svchost