tscfgwmi.dll

  • File Path: C:\Windows\system32\tscfgwmi.dll
  • Description: Remote Desktop Session Host Server Configuration WMI provider

Hashes

Type Hash
MD5 B955AAF0231F5127970E94A7F835803D
SHA1 A3A3EE767C92B59E0C47E7CF709A6863871030C3
SHA256 C866ED8E8D1D8F7203317D02314C17FFAD3CA2FDE6B501204A3753BFCDD6AE9A
SHA384 104156719C5D86175B0BB0E4C52CCFC65B2EE821C310310CC137C7B0B03DE5AD309BB11E4E4DA9307005872F9FCDDDD2
SHA512 0788CE287FA264029D2B9E2651AE118B31FA63D970DBB43ECBC3EBB79D51C5205C8ECDFA0EEE70C1FB324461DF43E00494BBAFD4DC383752E681F3C617B22EF3
SSDEEP 6144:G1CJF5YoV9DHSPzxR3j61JeqeoDoKhSbLOUGkh:G1CJvYoVNHwR3ubeFahS7N
IMP 48349045AA1C314802BF487333354060
PESHA1 B3CCC9157DC4D606500A381499BA5A718372EE59
PE256 B9BBCE08159F686173B15BAF01D28F8FD85D47A7498485BA8F2F598F8D123081

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TsCfgWMI.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/c866ed8e8d1d8f7203317d02314c17ffad3ca2fde6b501204a3753bfcdd6ae9a/detection/

MIT License. Copyright (c) 2020-2021 Strontic.