pwrshplugin.dll

  • File Path: C:\Windows\system32\pwrshplugin.dll
  • Description: pwrshplugin.dll

Hashes

Type Hash
MD5 4E6F1DB90DFCED466743EFBDDE9EB909
SHA1 DBFA73AB72E5593BA70B73A29C2E8AA1284FB759
SHA256 25E8D298CAF10390FF1C97BD1ED7ED7D1D3659DB4AA8FB8120D6B7FBA3CE4DC9
SHA384 C2E9C7217082934114BC60C1A40C19ECCE1427DD8A66DB90AF8EDCD6E5E99C8453784BC74907833CEB8C2B9D6CC94E73
SHA512 9A42264A4D7C86DDC69ED43C5FC49C13C454A5651FF1FDC426D50D22D1CBDD12AB558C4A95B5E31E01F9AF41D09131D16F842099E971E60581AAA2D6EF7B91D7
SSDEEP 1536:WBdUtFnC+Kj2LNCCwNNERu6gY+cWkzHui2s1mdFnvR2ymnd:XxKKLNCPNY+cWkKh9dFnvR2yed
IMP 0ADA5F4D3F42787A29B3604B9DACB67E
PESHA1 1C2ED9674835311B5F6B7EE8EBAFD03A6B3CEBC4
PE256 ECBB1DF3B1A98CEECFE320A2BEC1391824D346A1CE134A27420A32E0EEDC6D1F

DLL Exports:

Function Name Ordinal Type
WSManPluginShell 9 Exported Function
WSManPluginSend 8 Exported Function
WSManPluginReleaseShellContext 7 Exported Function
WSManPluginStartup 12 Exported Function
WSManPluginSignal 11 Exported Function
WSManPluginShutdown 10 Exported Function
WSManPluginCommand 3 Exported Function
PerformWSManPluginReportCompletion 2 Exported Function
GetCLRVersionForPSVersion 1 Exported Function
WSManPluginReleaseCommandContext 6 Exported Function
WSManPluginReceive 5 Exported Function
WSManPluginConnect 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: pwrshplugin.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/25e8d298caf10390ff1c97bd1ed7ed7d1d3659db4aa8fb8120d6b7fba3ce4dc9/detection/

MIT License. Copyright (c) 2020-2021 Strontic.