MsiProvider.dll

  • File Path: C:\Windows\SysWOW64\Dism\MsiProvider.dll
  • Description: DISM Msi Provider

Hashes

Type Hash
MD5 DD7F53DB94C12B2DCB286D2F54EE3FD8
SHA1 5E426FDAE1FEF0C968028C6DEBB08270FEB4F43E
SHA256 D8B8413AE024173976982E5A00D0FAB36DB8BCE4A2A59E3709C00AF318F56A43
SHA384 9815BA8D572704BC2D02455B3FA250D05B537F392705D78C41E11ED37A00CB75DA3BD3722642A0613C48A9F791E8F522
SHA512 F773E741DECA924732EA4D8FAB03E57F01C857E53CE0C304BA1040E2FB5B9694F4DC840FC68762372B57C93CF593B788D52CBE7A07D3A42EE31D02E01ED9ACB8
SSDEEP 3072:I8+RAuGW4KQt6kJgLeCkeUHoXyHybqk2x6DKioQZDFQlUoMI03e0Mxl:9k4KQt6wYyHybvs6DHZe3Pl
IMP DE9FDFAB3ACA8D291C747E90BE82673F
PESHA1 C23728938CF545A71F39C6495D693C423E5D9EF9
PE256 9D4E1EBF35CBFEE0A5B1B1E227ADE330266870B5488D6D461AD919C3C8D6A26B

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DLLGetDISMProviderCLSID 1 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetClassObject 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MsiProvider.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/d8b8413ae024173976982e5a00d0fab36db8bce4a2a59e3709c00af318f56a43/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Dism\MsiProvider.dll 25

MIT License. Copyright (c) 2020 Strontic.