photowiz.dll

  • File Path: C:\Windows\system32\photowiz.dll
  • Description: Photo Printing Wizard

Hashes

Type Hash
MD5 67D990655034FAC2CCC712384E0F7D80
SHA1 365749F7262B3D2829AE1F8FBB52C20577A7F494
SHA256 487626DE166380F579D42AC80BA0388D5629926A782F234F92C899930E572E20
SHA384 837C9E04FB41F4C4DF423DF3AF5E353F9574443424237DC809F2E94FFCB4FE5A0AD344DD83CE798CC8B552B7055C98CE
SHA512 EC2A466ADD0B0AF2AF5A923EBD27BCDF2DE46F792BB4BFCC438B77A8677AE6229364CD74D23388146B6FF1B5FCF013E718794738528941F3C84F96C30B2F8807
SSDEEP 6144:loJyhDl3feZ9fxv5Js1S/MY3RJjyuEZMa7Z4JW:lXxqTRITM
IMP 9F1D654C8F5E6DC80CF87C00C4A4CE83
PESHA1 3A2214A7A1D9D1B418BDED5D8541D5BD94F549EB
PE256 23342A2A9C68EB4A60962D7EC7421DFB430A5A15E8D758487D1FD8765591967F

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 6 Exported Function
DllUnregisterServer 7 Exported Function
UsePPWForPrintTo 1 Exported Function
DllMain 5 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetClassObject 3 Exported Function
DllInstall 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: photowiz.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/487626de166380f579d42ac80ba0388d5629926a782f234f92c899930e572e20/detection/

MIT License. Copyright (c) 2020-2021 Strontic.