Win32_Tpm.dll

  • File Path: C:\Windows\system32\wbem\Win32_Tpm.dll
  • Description: TPM WMI Provider

Hashes

Type Hash
MD5 57CE8A7C5BA9C4330E014F1A318CFD65
SHA1 A3492FAF53C1FA6148CB6E13FC29B18E15F6819A
SHA256 65DC7E5869BD6A7D64171EF7820225B936C39FE5CB10E83E538BF1B6CE5E3C62
SHA384 68BDDB80FD40E2E03590499E1F00E67A1E0F3F7FC43AF402F88CA344EA64BACA155D657B30155B11A0A6AD92E4C53BBD
SHA512 B898DA06AE0CECF4A4E024291CA49F15F18F0FAA13647706A5542F67E88F7EEECC35062096A9855E7E4CB7FE057C5B5BAF52F97EE61CCF85DCFB772EF497CC73
SSDEEP 1536:EdiRhE365nQm9zafgE1OL29Yf1aE0IEtwt8mQ7U80kc2zyxanIVbcVafvtKsV9OS:EIRh66ym9msL2yf1atIEtU8mQ7a4yxa0
IMP F6E6B52C0BD453FFB04609273DF02B33
PESHA1 65321805639BE06947C9DA8A36AEEBEAF18C7F2C
PE256 899DA37E940D024C3BC019864D40CDCC82AE177D5B224252E6A9FEA9C3EBA63E

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Win32_Tpm.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/63
  • VirusTotal Link: https://www.virustotal.com/gui/file/65dc7e5869bd6a7d64171ef7820225b936c39fe5cb10e83e538bf1b6ce5e3c62/detection/

MIT License. Copyright (c) 2020 Strontic.