ProvProvider.dll

  • File Path: C:\Windows\SysWOW64\Dism\ProvProvider.dll
  • Description: DISM Provisioning Provider

Hashes

Type Hash
MD5 A7F0A8DC650EA3866421E0C89E2546AD
SHA1 76F04A7C4692AB3986C96E671639889451FF7E97
SHA256 A663360EDF23DDD969BC10785563B7A82F83AE620CED7EEA9427AC8A611C629E
SHA384 653A014EB9A91EDE1406B8E794E1E8D6CB105268162269BE7178A2B0EE47A1D11D390B351E311334557236BC977C27B5
SHA512 A51991A2DF13A96B61676C839D675935D7AB25EA0033E952628EEAB6CE24819523F205617AA52853B7FF607E5DB587964E8EE816CBFA1EADFF27D7E9286C4E1F
SSDEEP 12288:sTUUdnTEPJJ6HxghxiJCkg6KT4fmCGeeAtjZIyIY18rMS1VIrGyTjOH1V5vRk8:+jdgqYiKeeAtjGTlV55k8
IMP 496565C94D11591C3A9706FBB24D2C81
PESHA1 8EB760421C5D6B14D203484D50C4C1FBA9B12BFE
PE256 7E9BD4A358439303114288EC73AC86E4E6C927F5C5C5FF342481D4F325C02E3F

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DLLGetDISMProviderCLSID 1 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetClassObject 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ProvProvider.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 1/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/a663360edf23ddd969bc10785563b7a82f83ae620ced7eea9427ac8a611c629e/detection/

MIT License. Copyright (c) 2020 Strontic.