DMWmiBridgeProv1.dll

  • File Path: C:\Windows\system32\wbem\DMWmiBridgeProv1.dll
  • Description: DM WMI Bridge Provider

Hashes

Type Hash
MD5 E58C8BA89CC9A5B3A1A86A0A3D7899B6
SHA1 417F61AB8C511D4995F5F6C0B7F454A30BF237BC
SHA256 9274E78026A811886F2ECE2C9B198B5D1CE66DAB42FD8B165B6AEA0821FB92BF
SHA384 CF65EF97F5ED3CDC2DD44ABE007FE342FD89610B6374B6920C1A926B93D4CED8B875826444D2C0AE4F32A941C83B8EC2
SHA512 291BCD2AC3104148A2529D06324C5AA8C8BA73ABFE4EF3D5FEF375B1012A7E340C3987FE43B4B9A5A54ADB8B3729C99ABA6779114E9BF1466FC69064F1B8ED9E
SSDEEP 12288:SEBhCYKfoAGzqiPmIGYQ6N2dPo9k/CBWOcWx:S8hQQZGmmIGP62de7
IMP 94BE11B9F1A829D8D5CDF54F5BD89FCB
PESHA1 A3CCFC06CD0F1BF4AFBBCF35BAFA45A2D4C32C3D
PE256 808EB7381EF68FE6283406C638646C47D0CB97BCE1D6E206C15DF5BA8F2C39D9

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 5 Exported Function
GetProviderClassID 6 Exported Function
MI_Main 7 Exported Function
DllRegisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function
DllMain 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DMWmiBridgeProv1.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/9274e78026a811886f2ece2c9b198b5d1ce66dab42fd8b165b6aea0821fb92bf/detection/

MIT License. Copyright (c) 2020 Strontic.