bcdprov.dll

  • File Path: C:\Windows\system32\bcdprov.dll
  • Description: Boot Configuration Data WMI Provider

Hashes

Type Hash
MD5 ADD708E16110CBCA5C49C32F44F16F91
SHA1 786D9C525F585DB07C70759327E4A05F7C38DA50
SHA256 D725CF226EAE257D333473E33F8D4EE1AF12396F06D69D00D2589E3BA4E3692D
SHA384 7C408C51FC94B1D0D21956AFDE8BCB77C314E420F9E80F88CFA2B5EB2801BDF6FEE3A6101B439137E11BCD56F22CD36D
SHA512 2443E5B8CA9B62D7792E6F8C384290A308B71053B727E0E3D345A7E3B766DA74645E91DE61AE8E2DB378F2C1D0B9ACD64C4718265652D958AEA5E171A05BC1BB
SSDEEP 1536:wdDKzhLMgcsG2QSHN3962kIqzj2MfBJ0KE+kaShVy89opU9eOMtEMzm24SR46fJi:pft62kIqzj2MZJ0KE+ZEVha2VFSBI6W/
IMP A87A7B4882B60DD332BD0CCD4D72988D
PESHA1 3086572783EB0B737A3F7FBC3C353BEE8434487E
PE256 19C53CDAD520F47690E8531EAABB526AAC2769E98FB747197D8FABF049962044

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllMain 2 Exported Function
DllGetClassObject 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: bcdprov.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/d725cf226eae257d333473e33f8d4ee1af12396f06d69d00d2589e3ba4e3692d/detection/

MIT License. Copyright (c) 2020 Strontic.