frprov.dll

  • File Path: C:\Windows\system32\frprov.dll
  • Description: Folder Redirection WMI Provider

Hashes

Type Hash
MD5 6F2EAFA3F52EC9099071E82F8CA5BA8E
SHA1 9221E819126617C8B4F61CA40C89E27CCF4CF51F
SHA256 7C6D0214B84F9196C104D233D95F6BE6A7E4F8136DD1F756FB438C8C136381AE
SHA384 5EB07685E7F9FB4A9A84C73BD2FF75F2DC09F6AC125D3C69EC794F7ECFDD25E776F1297AAE735A42233C3EF004AC7A8C
SHA512 355AEB93D413CB4AAE45FB2B5EF9A7822C9AA31984BEB945E75564F52418F3BEDAE8901079B49D61BA2AB36430042BD22AE71BBD51DE46DF729572AB4A90C830
SSDEEP 1536:4gOvoUtk4bCBWn7k/3GwtSPWcSfBd+gFRV2icBBeyXYgL:4ZvoHECc7QWwBfz+gFRgHwyogL
IMP 67A28989242D3CCF99DAA8DA3A7F8874
PESHA1 CFBC81E3058E004FB9EFB676231D4660CC11DDFF
PE256 94BF0629CDC3BD20473D15AE7E5B263A83170CAC786F9461B1579A389E2D27A6

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: FRPROV.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/7c6d0214b84f9196c104d233d95f6be6a7e4f8136dd1f756fb438c8c136381ae/detection/

MIT License. Copyright (c) 2020-2021 Strontic.