WMICOOKR.dll

  • File Path: C:\Windows\system32\wbem\WMICOOKR.dll
  • Description: WMI

Hashes

Type Hash
MD5 9017C6116B505FB120947A5D52B78A50
SHA1 587E32A6150E499F99E203405598727959847579
SHA256 53FC704F2C933DEEBA72E5EE24628210B7C0CD5C1FAF47C08E9E2964250A2E68
SHA384 344F1BA4459E5D5FF12206FD7F49534A8ED105A8346C068E78F57DFBC0950F99793B08EDC3D7109BDDD4B7A459223BE5
SHA512 988737E405EF4C80444B187A2DEEB1BBF3362BF72483B4C234AB170386B9E59445FE13ECCC2A4968B2E4B5D28908458F398191EBA82E5EF0D1E25B19FF85221A
SSDEEP 1536:7Qnn56MjrPvN2f4nols4VJM4WU7I9j59+IgRvq6nVx:7s56ErP44nols4JM4WU7I9j59+Ig9q67
IMP 80C201390C8B92C34CC4311A2249EA1D
PESHA1 EA0FBAFE52D77E97CF6CA70380ECC868975E8CEC
PE256 5CD03B1B3D2941559D1229F2A07DF27B9F9C666AB7A6DC76FCC08F2889368731

DLL Exports:

Function Name Ordinal Type
CWbemCriticalSection::GetLockCount 61 Exported Function
CWbemCriticalSection::GetRecursionCount 64 Exported Function
WString::operator 37 Exported Function
WString::operator 35 Exported Function
WString::operator 36 Exported Function
CWStringArray::operator 31 Exported Function
CWStringArray::GetArrayPtr 58 Exported Function
CWStringArray::GetAt 60 Exported Function
CWin32DefaultArena::WbemSysFreeString 78 Exported Function
CWbemCriticalSection::GetOwningThreadId 62 Exported Function
CFlexQueue::GetQueueSize 63 Exported Function
CSmallArrayBlob::Size 75 Exported Function
CFlexArray::Size 74 Exported Function
CEnterWbemCriticalSection::IsEntered 68 Exported Function
CFlexArray::Add 44 Exported Function
WString::Length 71 Exported Function
WString::operator 34 Exported Function
WString::EqualNoCase 52 Exported Function
CWStringArray::Size 76 Exported Function
WString::Equal 51 Exported Function
WString::GetStringPointerByRef 65 Exported Function
CCritSec::Leave 70 Exported Function
public: void __cdecl CFlexArray::default constructor closure'(void) __ptr64 41 Exported Function
CCritSec::Enter 50 Exported Function
CCheckedInCritSec::Enter 49 Exported Function
CCheckedInCritSec::Leave 69 Exported Function
CWStringArray::Compress 47 Exported Function
WString::BindPtr 46 Exported Function
public: void __cdecl CWStringArray::default constructor closure'(void) __ptr64 43 Exported Function
CFlexArray::SetSize 73 Exported Function
public: void __cdecl CFlexQueue::default constructor closure'(void) __ptr64 42 Exported Function
CFlexArray::GetArrayPtr 54 Exported Function
CSmallArrayBlob::GetArrayPtr 56 Exported Function
CWin32DefaultArena::Realloc 72 Exported Function
CWin32DefaultArena::Free 53 Exported Function
CWin32DefaultArena::Alloc 45 Exported Function
CFlexArray::GetArrayPtr 55 Exported Function
CSmallArrayBlob::GetArrayPtr 57 Exported Function
CSmallArrayBlob::operator 30 Exported Function
CFlexQueue::Unqueue 77 Exported Function
CSmallArrayBlob::GetAt 59 Exported Function
CCheckedInCritSec::IsEntered 67 Exported Function
public: __cdecl CCheckedInCritSec::~CCheckedInCritSec(void) __ptr64 12 Exported Function
CCritSec::CCritSec 5 Exported Function
CCheckedInCritSec::CCheckedInCritSec 4 Exported Function
CArena::CArena 2 Exported Function
CArena::CArena 3 Exported Function
CHaltable::CHaltable 7 Exported Function
CInCritSec::CInCritSec 8 Exported Function
public: __cdecl CEnterWbemCriticalSection::~CEnterWbemCriticalSection(void) __ptr64 14 Exported Function
public: __cdecl CCritSec::~CCritSec(void) __ptr64 13 Exported Function
CEnterWbemCriticalSection::CEnterWbemCriticalSection 6 Exported Function
DllCanUnloadNow 80 Exported Function
DllGetClassObject 81 Exported Function
const CWin32DefaultArena::vftable' 40 Exported Function
const CArena::vftable' 38 Exported Function
const CHaltable::vftable' 39 Exported Function
CFlexQueue::IncrementIndex 66 Exported Function
CArena::CArena 1 Exported Function
CFlexQueue::DecrementIndex 48 Exported Function
DllRegisterServer 82 Exported Function
DllUnregisterServer 83 Exported Function
public: __cdecl CInCritSec::~CInCritSec(void) __ptr64 15 Exported Function
CFlexQueue::operator 23 Exported Function
CHaltable::operator 24 Exported Function
CEnterWbemCriticalSection::operator 22 Exported Function
CCheckedInCritSec::operator 20 Exported Function
CCritSec::operator 21 Exported Function
CWbemCriticalSection::operator 28 Exported Function
CWin32DefaultArena::operator 29 Exported Function
CSmallArrayBlob::operator 27 Exported Function
CInCritSec::operator 25 Exported Function
CSmallArrayBlob::operator 26 Exported Function
WString::operator 32 Exported Function
WString::operator 33 Exported Function
public: __cdecl CWin32DefaultArena::~CWin32DefaultArena(void) __ptr64 16 Exported Function
CWin32DefaultArena::CWin32DefaultArena 9 Exported Function
CWin32DefaultArena::CWin32DefaultArena 10 Exported Function
CArena::operator 18 Exported Function
CArena::operator 19 Exported Function
CHaltable::isValid 79 Exported Function
WString::WString 11 Exported Function
public: __cdecl WString::~WString(void) __ptr64 17 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wmicookr.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/53fc704f2c933deeba72e5ee24628210b7c0cd5c1faf47c08e9e2964250a2e68/detection/

MIT License. Copyright (c) 2020-2021 Strontic.