CIWmi.dll

  • File Path: C:\Windows\system32\CIWmi.dll
  • Description: WMIv2 Provider for CI Policy Management

Hashes

Type Hash
MD5 985BA46597817BAB1C580243719915F7
SHA1 406608C7A5CC52A5F9C6B327A40E59F2EB2EB75F
SHA256 612599EE41882CD592A26D6610D65EFF0A6CF812C5F53771784DB11307C6BA4E
SHA384 0721C74B5C63CC7DBDD399F1E8FDDBE66FE300FD3C6951D3204B8760BA716CB7AC03F9DE73C135EFA464F0CAFF18C27B
SHA512 6F7E2575FAE8BF3E90A28BD6FD696A1F554E71B569F9F92E6BD6BAF963C1F6860DDFA147BB5871C17180556708040193A76E2745D4FB95442BC1015F6A52ADEC
SSDEEP 768:J8H2/xJ8TZ0y+J3A+FsXy/m0cdUs5aqBl0lDt5jFMA/Vvh:hMZ0g+FEy/mldEqB+l/Ff/x
IMP 994F593CFC41200E7BDB3BFDE758A8DD
PESHA1 3ED063640FF7A15AD79B088374BDC3367A591702
PE256 DDB748751DA77014E0E5428220B8A06AD0A0A233EA20720F70C72B87E8B3EE2D

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 5 Exported Function
GetProviderClassID 6 Exported Function
MI_Main 7 Exported Function
DllRegisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function
DllMain 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: CIWMI.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/612599ee41882cd592a26d6610d65eff0a6cf812c5f53771784db11307c6ba4e/detection/

MIT License. Copyright (c) 2020-2021 Strontic.