Wintrust DLL when building from source
Hello, I've built GenP from source and was able to obtain the dependencies (UPX, AutoIt) from official sources for security reasons. The wintrust DLL is a dependency I could not obtain myself.
The file needs to be unmodified and original. I've googled the hashes (wintrust.dll - 1b3bf770d4f59ca883391321a21923ae) and could not find mentions of this version. My Windows 11 installation comes with its own version (in System32) but the file size is quite different and it's obviously a much newer version.
Thanks!
This is expected behaviour.
wintrust.dllis a core Windows system component and is not distributed as a standalone dependency. Its file size, hash, and internal version are build-specific and vary with the Windows release, cumulative updates, servicing stack, architecture, and signing catalog.As a result, there is no single original or canonical hash for
wintrust.dll. The hash you referenced corresponds to a specific historical Windows build and cannot be independently sourced outside the original Microsoft installation media or update package it shipped with.Seeing a newer and different
wintrust.dllon a current Windows 11 system is normal and does not imply modification. What matters in this context is that the DLL originates from a legitimate Windows build rather than matching a specific historical hash; differences in version, size, or hash are expected and do not by themselves indicate a problem.In practice, substituting a different
wintrust.dllfrom a legitimate Windows build is supported and generally works, although the provided DLL is the one tested and known to behave consistently.For a more detailed breakdown, see Versioning and Authenticity under WinTrust in the Troubleshoot Section.
As an additional data point, I’ve also verified this by patching a current Windows 11
wintrust.dll(v10.0.26100.7705- 531KB) using the same script that was originally tested against the providedwintrust.dll(v10.0.19041.630- 374KB).In this case, the patch applied cleanly, the expected byte changes were made, and behaviour was consistent.
This confirms that using a
wintrust.dllfrom a legitimate Windows installation generally works in practice even when versions differ, while the provided DLL remains the known and tested baseline.