Hello, I’ve built GenP from source and was able to obtain the dependencies (UPX, AutoIt) from official sources for security reasons. The wintrust DLL is a dependency I could not obtain myself.
The file needs to be unmodified and original. I’ve googled the hashes (wintrust.dll - 1b3bf770d4f59ca883391321a21923ae) and could not find mentions of this version. My Windows 11 installation comes with its own version (in System32) but the file size is quite different and it’s obviously a much newer version.
Thanks!
You must log in or # to comment.
This is expected behaviour.
wintrust.dllis a core Windows system component and is not distributed as a standalone dependency. Its file size, hash, and internal version are build-specific and vary with the Windows release, cumulative updates, servicing stack, architecture, and signing catalog.As a result, there is no single original or canonical hash for
wintrust.dll. The hash you referenced corresponds to a specific historical Windows build and cannot be independently sourced outside the original Microsoft installation media or update package it shipped with.Seeing a newer and different
wintrust.dllon a current Windows 11 system is normal and does not imply modification. What matters in this context is that the DLL originates from a legitimate Windows build rather than matching a specific historical hash; differences in version, size, or hash are expected and do not by themselves indicate a problem.In practice, substituting a different
wintrust.dllfrom a legitimate Windows build is supported and generally works, although the provided DLL is the one tested and known to behave consistently.For a more detailed breakdown, see Versioning and Authenticity under WinTrust in the Troubleshoot Section.
As an additional data point, I’ve also verified this by patching a current Windows 11
wintrust.dll(v10.0.26100.7705- 531KB) using the same script that was originally tested against the providedwintrust.dll(v10.0.19041.630- 374KB).In this case, the patch applied cleanly, the expected byte changes were made, and behaviour was consistent.
This confirms that using a
wintrust.dllfrom a legitimate Windows installation generally works in practice even when versions differ, while the provided DLL remains the known and tested baseline.
