MDMAppProv.dll
- File Path:
C:\Windows\system32\wbem\MDMAppProv.dll
- Description: MDM Application Provider
Hashes
Type |
Hash |
MD5 |
2091E2C155A33D5D5DD43A8DDF1AAA3F |
SHA1 |
02839867DD98B6C557A23069477FAD6F94DE2703 |
SHA256 |
014830F5AE7AD9CA312B46428FC664432036EFA2A48324315A880AA47EABFA32 |
SHA384 |
26276506D232E1ADEAC173FD712D7C9114B990FB64E7B9F3861FA11E58A4CBDDE914BB21819A363836BD74A648AD929B |
SHA512 |
9CA725463755AF06E523D50398072C886195CBC0293DA7C593356641AF53EAE7DD3FA33F04C393B372CD59ABB503AFB8C503660E5001D8DB573664E479846E31 |
SSDEEP |
3072:0EYir/qSdq2hXfmQmrYMy48cEBEibcmNKnHR8ZFRVn8XWUMxXU:0Ehq2hxm8rBfXNC8PsWU8 |
IMP |
06DA89C798D3B9B21E196073D4752F5D |
PESHA1 |
806CC75C73497D7987320253B6D73459FCC9D5A8 |
PE256 |
8BB3300E4A98943804DE1E8127C912994F407E354A65ADC4B18A943C71745F27 |
DLL Exports:
Function Name |
Ordinal |
Type |
DllUnregisterServer |
5 |
Exported Function |
GetProviderClassID |
6 |
Exported Function |
MI_Main |
7 |
Exported Function |
DllRegisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
DllMain |
3 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: MDMAppProv.dll.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/71
- VirusTotal Link: https://www.virustotal.com/gui/file/014830f5ae7ad9ca312b46428fc664432036efa2a48324315a880aa47eabfa32/detection/
MIT License. Copyright (c) 2020-2021 Strontic.