CIWmi.dll
- File Path:
C:\Windows\system32\CIWmi.dll
- Description: WMIv2 Provider for CI Policy Management
Hashes
| Type |
Hash |
| MD5 |
985BA46597817BAB1C580243719915F7 |
| SHA1 |
406608C7A5CC52A5F9C6B327A40E59F2EB2EB75F |
| SHA256 |
612599EE41882CD592A26D6610D65EFF0A6CF812C5F53771784DB11307C6BA4E |
| SHA384 |
0721C74B5C63CC7DBDD399F1E8FDDBE66FE300FD3C6951D3204B8760BA716CB7AC03F9DE73C135EFA464F0CAFF18C27B |
| SHA512 |
6F7E2575FAE8BF3E90A28BD6FD696A1F554E71B569F9F92E6BD6BAF963C1F6860DDFA147BB5871C17180556708040193A76E2745D4FB95442BC1015F6A52ADEC |
| SSDEEP |
768:J8H2/xJ8TZ0y+J3A+FsXy/m0cdUs5aqBl0lDt5jFMA/Vvh:hMZ0g+FEy/mldEqB+l/Ff/x |
| IMP |
994F593CFC41200E7BDB3BFDE758A8DD |
| PESHA1 |
3ED063640FF7A15AD79B088374BDC3367A591702 |
| PE256 |
DDB748751DA77014E0E5428220B8A06AD0A0A233EA20720F70C72B87E8B3EE2D |
DLL Exports:
| Function Name |
Ordinal |
Type |
DllUnregisterServer |
5 |
Exported Function |
GetProviderClassID |
6 |
Exported Function |
MI_Main |
7 |
Exported Function |
DllRegisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
DllMain |
3 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: CIWMI.DLL.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/612599ee41882cd592a26d6610d65eff0a6cf812c5f53771784db11307c6ba4e/detection/
MIT License. Copyright (c) 2020-2021 Strontic.