RacWmiProv.dll

  • File Path: C:\Windows\system32\wbem\RacWmiProv.dll
  • Description: Reliability Metrics WMI Provider

Hashes

Type Hash
MD5 89F90990E9C565095623177D5E2C42A0
SHA1 5705E41A23E59A7B39CB91F0887FC6ACEB046667
SHA256 1ED7B4EDED304CE1FC0CE84A891C3EC24E5714C041228FEA5A876E2A3EB6BA65
SHA384 8B306DA48B2D75F7B6B723781AF3ECAD8088237F00DA5495C12F5180CEFF947F0B08BADAAC7CA76D17F0FF1D370108A9
SHA512 3E8673A94713D6BE35D8476DF6392BD6B19B53E82C9EAEA1EFE67358CA14FB471F1F34CA7D42C20127E4C1ABC0BCEDA3AD4074359A2EE310C08636F162BF1025
SSDEEP 1536:FBm4s2OFTulDCyzXZFrRgpj42zqg+yDNqttZVc84qC:FBm4POMDNrq40N+yhT8dC
IMP 37F837EE1522832A5538AEDE2440075B
PESHA1 C35C9306DDD8BD6AC9D2E23100346245561B3592
PE256 F13E3DD70482A7296939BA7E12763D2AC6B6000E1B6EADFDF0118663E29363A0

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RacWmiProv.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/1ed7b4eded304ce1fc0ce84a891c3ec24e5714c041228fea5a876e2a3eb6ba65/detection/

MIT License. Copyright (c) 2020 Strontic.