MsiCofire.dll

  • File Path: C:\Windows\system32\MsiCofire.dll
  • Description: Corrupted MSI File Recovery Diagnostic Module

Hashes

Type Hash
MD5 9E38D02A0E135E97235752B4D87670EA
SHA1 EE802167BC17F5806F01D267000F9382BEA2A96E
SHA256 BD8BA260679CFC37A21E5C277645D7DEC875785DE2F10FC9C801923061BE6FBA
SHA384 716F372F1BBFD20FC346A78D118D3540F8DD9440C7E9CA7AC890E4C8A88BC18AD802DC3543FD0111D8258D07052E7FB4
SHA512 A8934DB8EBC2549B213A384B37C6F98EEC10FF6BE6A5B9003AEC515368DF02E34A098726BAF7C22AC4C1297867154207A9B82D807E259F6E2AB8CACEFC2C80DB
SSDEEP 768:q0oHChRpbZzDTETCaB5QlnjsWqgsNS4RnM9nXA3:q0cCh7ZzsmainHkS4RnM9nXA3
IMP 30DCA5DC831BA1E7FA8BBCE7265A1567
PESHA1 6F51A82FDD2E4EB7F0CA5710398246DBE69B7F3F
PE256 16C7D51BA4372E08393DDCEF031A1F114B590A0B8BD309B9BF5DD8ADC138428E

DLL Exports:

Function Name Ordinal Type
WdiGetDiagnosticModuleInterfaceVersion 2 Exported Function
WdiHandleInstance 3 Exported Function
DllMain 4 Exported Function
WdiDiagnosticModuleMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MsiCofire.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/bd8ba260679cfc37a21e5c277645d7dec875785de2f10fc9c801923061be6fba/detection/

MIT License. Copyright (c) 2020 Strontic.