provsvc.dll

  • File Path: C:\Windows\system32\provsvc.dll
  • Description: Windows HomeGroup

Hashes

Type Hash
MD5 5FC19A76BCD4D18B32E17B93898B981C
SHA1 A1E76DF13FD1F254BACF80550237BD83F9F213FD
SHA256 73749AAE44BF7A066C52C708A222D3E54E80BD5094C6B834A81F54D3859698CB
SHA384 6FEDA05B1E90098F2B49451A444EA8CD6D80A3543DB818F6DB426948653D4676B24D1A4E801262002A86273DEEE41CB5
SHA512 736640470DA185163FD50DF26914D9C9486F7881983ED50A5E8954C34C566F4E19498D881A6E1AACD21C81DCF3FE37603D6FC5F43A54A7B44EA9CE7200C2200E
SSDEEP 12288:CJFa/DnFu/55OrIPwgOJwUYkfhhOBWI9/Uw2SPlWL1P/Pp70:kFMneOE6wPk5Aih7
IMP 8E4336A9D36DD877CBDE9D0EAEF1A6C2
PESHA1 9F3974A8591349BA64C3160E302D944EF0F08111
PE256 67DB46F6892CAF6FDB3362695D85B4DF57D9B9DEB196923B77505DDAE961FBC6

DLL Exports:

Function Name Ordinal Type
ProviderServiceMain 3 Exported Function
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: provsvc.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/73749aae44bf7a066c52c708a222d3e54e80bd5094c6b834a81f54d3859698cb/detection/

MIT License. Copyright (c) 2020-2021 Strontic.