schedprov.dll

  • File Path: C:\Windows\SysWOW64\wbem\schedprov.dll
  • Description: Task Scheduler WMIv2 Provider

Hashes

Type Hash
MD5 FD882568917B06111D971A2F22E93A7A
SHA1 B01D69D16F1A5F2D99E79E9992A77B77AE0F517B
SHA256 5EAC9FDEC7778AC9230246632B53104EDB9D140009ED9CC6564577C014B8D127
SHA384 BB3A7B10D9A3A035DF5F3A377EAE82367EFA0C419C97FA63CE964C840EFCBB56EBE112F90E19B660BAD2F8A870DCE340
SHA512 A1EFB345448EE6244C06BA019552F07F9CC4130C2ED0A3732782A2A950BE3B261EEC902F74763C40540A62B665EFBF8CFBC9C9DCB3A41D81BE45E3FF3F233D72
SSDEEP 3072:nBi+fssPoF81nYMoGIiQMUcPaGrrqEUPSQBzZdNjd+l2+gK:nrfsmoq1douX1PaarqEUPSQBzZz5+g
IMP 5F7C7F82BF05519ADCAF2C835FE33940
PESHA1 C04B9E3CAC8309F0FB51523508605EE1E3041886
PE256 4F7E64B927D13B36508C2E77E7CA23018E318B1293631A8FAC2693D5B9D4CE1E

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 5 Exported Function
GetProviderClassID 6 Exported Function
MI_Main 7 Exported Function
DllRegisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function
DllMain 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: schedprov.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/5eac9fdec7778ac9230246632b53104edb9d140009ed9cc6564577c014b8d127/detection/

MIT License. Copyright (c) 2020-2021 Strontic.