frprov.dll
- File Path:
C:\Windows\system32\frprov.dll
- Description: Folder Redirection WMI Provider
Hashes
Type |
Hash |
MD5 |
6F2EAFA3F52EC9099071E82F8CA5BA8E |
SHA1 |
9221E819126617C8B4F61CA40C89E27CCF4CF51F |
SHA256 |
7C6D0214B84F9196C104D233D95F6BE6A7E4F8136DD1F756FB438C8C136381AE |
SHA384 |
5EB07685E7F9FB4A9A84C73BD2FF75F2DC09F6AC125D3C69EC794F7ECFDD25E776F1297AAE735A42233C3EF004AC7A8C |
SHA512 |
355AEB93D413CB4AAE45FB2B5EF9A7822C9AA31984BEB945E75564F52418F3BEDAE8901079B49D61BA2AB36430042BD22AE71BBD51DE46DF729572AB4A90C830 |
SSDEEP |
1536:4gOvoUtk4bCBWn7k/3GwtSPWcSfBd+gFRV2icBBeyXYgL:4ZvoHECc7QWwBfz+gFRgHwyogL |
IMP |
67A28989242D3CCF99DAA8DA3A7F8874 |
PESHA1 |
CFBC81E3058E004FB9EFB676231D4660CC11DDFF |
PE256 |
94BF0629CDC3BD20473D15AE7E5B263A83170CAC786F9461B1579A389E2D27A6 |
DLL Exports:
Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: FRPROV.DLL
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/67
- VirusTotal Link: https://www.virustotal.com/gui/file/7c6d0214b84f9196c104d233d95f6be6a7e4f8136dd1f756fb438c8c136381ae/detection/
MIT License. Copyright (c) 2020-2021 Strontic.