DevDispItemProvider.dll

  • File Path: C:\Windows\system32\DevDispItemProvider.dll
  • Description: DeviceItem inproc devquery subsystem

Hashes

Type Hash
MD5 F1DAD0B454345A400CEC3BDC6EAB1814
SHA1 923AE116274C5784135BE20ED32B055F91A458C3
SHA256 B1EA8B0DFD7BF3370665A843530AD7D0E63CAB8F5A86CB7C3BE3EC0364CCCFFC
SHA384 D72C91D2F50A08732CE9DF402C60286FF9F011531F3F51F4640D3CA30E36025672F88D97208D91F6856DF505DB6FB4A4
SHA512 478C99076DF26F6849F03F2DC790149D99DD402F2400232E95714EE185F9ACD73174E737B296D9339CB12906DFF3A3B77E75727FFBEEA25BB2163965EC713E75
SSDEEP 1536:ne+Pnz0xoC9QIxGz47kXYWm0IjBEeMZyR/7JLrYEZ9AA8oo3XlfxlfMQtxxePPtd:e+PnKbPjBxL/7JLrYQYZxePf
IMP 8089BA1B3F1C44442AE3F651DF4DB9C4
PESHA1 551788E68341496BE4B17CB56D39610A1D6F7173
PE256 259C5174EC671AEA00BA258E3273E56EDAC7A416B7AF46C6527003162BA83091

DLL Exports:

Function Name Ordinal Type
DevQueryEntry 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DevDispItemProvider.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/b1ea8b0dfd7bf3370665a843530ad7d0e63cab8f5a86cb7c3be3ec0364cccffc/detection/

MIT License. Copyright (c) 2020 Strontic.