ImagingProvider.dll

  • File Path: C:\Windows\SysWOW64\Dism\ImagingProvider.dll
  • Description: DISM Generic Imaging Provider

Hashes

Type Hash
MD5 5A6AB722215513153293F9BB2BA5374F
SHA1 26209DB47F145862B2BB50CC90EDD22E67FB21F9
SHA256 4489338E60FE099C5975E08FA7A8E2DB9C3531B4CC5B754C465EA313AFEAE2AA
SHA384 C7115E1F1E6071E88141D6EA0D151DB7E3A52B882CF2E1E2393334368EC85E00AA3D4591FC247794746DABDBBF219787
SHA512 8AC6D85FB173ABE32E94EF36C4E203809320A3A582989F4C85B332E949E04DE427CCCF58485E169532ECE014C702F25B0F49E94DCA8D467C8C3F451C3839BB69
SSDEEP 3072:ks9HdmPycbb2AtdZgblrIHCiZjqhnoyFW8l889L/dlYJfa:kEUPPbdd2xCAKa
IMP 485E97C5FCB353F7444730B395DEB3B7
PESHA1 D3BED2552275E63C7D303438B502CE605ADE19C6
PE256 5E222DDAADB17BEA19E32165760F222E61BDC12B8B2929ABBDA2AD63E79737AC

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DLLGetDISMProviderCLSID 1 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetClassObject 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ImagingProvider.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/4489338e60fe099c5975e08fa7a8e2db9c3531b4cc5b754c465ea313afeae2aa/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Dism\ImagingProvider.dll 38

MIT License. Copyright (c) 2020 Strontic.