WMIPSESS.dll

  • File Path: C:\Windows\system32\wbem\WMIPSESS.dll
  • Description: WMI Provider for Sessions and Connections

Hashes

Type Hash
MD5 9BE96954745D7C36A5726DEB8AD28BDE
SHA1 8E44A8B9234D4E73F9D9FA1F414AA24648A9EE7E
SHA256 8300C2DA596F5C1A416D02A598E323CDB4E82FC480E125DF6FB3AA2C53CACFA2
SHA384 2FAD4B1A4A2AC7329552C2907FD44FA21C8BD2B94A2D951421C507C923CBC2BBAB6ADD4F39E3C9BBECB02C77F1C20667
SHA512 7E5060FB071DC528D463E378635C700E63974F20E477114C756178DE0D3DEF025C13F4383B0B1678634FD6A61B22DBE7A8C5D5726D6C59C71A40555EB92AA0D3
SSDEEP 1536:SXOWHEOQjeCKfEFIb0bnhf91dkSWpXIRqk:C/5QjeZfEyknhf9sS6YR9
IMP 2DA3B341F56E5D5D0381403B02B8DF06
PESHA1 82F5D19EA24DFE298F8A74DB61BCCEEC6EDDEE96
PE256 272DB2C7DDB6DDE7ED18076506357587513F22CD883ACCCD987F9A6480FB3EEA

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WMIPSess.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/8300c2da596f5c1a416d02a598e323cdb4e82fc480e125df6fb3aa2c53cacfa2/detection/

MIT License. Copyright (c) 2020 Strontic.