Win32_DeviceGuard.dll

  • File Path: C:\Windows\system32\Win32_DeviceGuard.dll
  • Description: DeviceGuard WMI Provider

Hashes

Type Hash
MD5 1BBBF460A683415E8D08F22BE6B5E63F
SHA1 2B6F283910D82B3C103EE48072AE556C122AB08C
SHA256 3ECD64F96AB8FB01C8C5A04C25A4062082D58AFCD41506524B9933165712B04B
SHA384 20A477B1BC3B973C8999579618FAD44043A12270C018036698D13EB257C63706E84947D7B361B92BD27FA922998CF742
SHA512 22E53919B33BCDA90BA1B2E308B6F13979B363C7293745C0910FFCB31915BCCFA1BDDED0496679F23ED092EC39485EE40E8A5EF06A9A7EE43000650483D5D4F9
SSDEEP 384:h6T4VFKKtskK48yZy3hVBz1CRRmDGWIuImbbLFNmU7V60gZAV6N38W+SWF:hO4VAKtDK14yV1CR8eizuZAwW
IMP D3461D9F3CCC73AA98E1774DED0B0159
PESHA1 21D8D7EF3D19DCA19040A6D7358BE11989B8F5BB
PE256 ADFF8BB9821F9CEE63249A1D6062274D62496CA1D7D1BAB62A95B2A5994302FA

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 5 Exported Function
GetProviderClassID 6 Exported Function
MI_Main 7 Exported Function
DllRegisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function
DllMain 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Win32_DeviceGuard.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/3ecd64f96ab8fb01c8c5a04c25a4062082d58afcd41506524b9933165712b04b/detection/

MIT License. Copyright (c) 2020 Strontic.