tspubwmi.dll
- File Path:
C:\Windows\system32\tspubwmi.dll
- Description: Remote Desktop Programs WMI provider
Hashes
| Type |
Hash |
| MD5 |
6CBB8AC7BD06B9D97977281BB40AECC9 |
| SHA1 |
A105F2295A4E3975DA00CBF73130711B67289061 |
| SHA256 |
0E775DE2BC649B7CCDC186E0C57260383D766BE0D895E5B32D26E628DA21B788 |
| SHA384 |
A30680CDD6F44FB2CB15F7C025D5036BA8A2AB948BDC28984ECB72248F0A5AA6C6DC47108C5DC017518CF9140331751C |
| SHA512 |
711D9448A502606FB32B21FC862964F7B52AD76CE0158F65DE9427D7C3017F35561A80874C87F0114E0EF1D1530E7BB6DCCC47EB6226BDA80FA4B3878A1440E2 |
| SSDEEP |
6144:tM/6noN8yfIpw+dF+uUwxS87nxTxXqnikM3pFwD76d2:+SnoxfIpldF+uU+7nl3kKpqD+ |
| IMP |
DEC66D74283CCBD2EBBF8CEDC1267814 |
| PESHA1 |
DE98ED9E9758D6627F308604A09F24F0DAE8942F |
| PE256 |
1248B6E8E4C05774D36A461C130905E60B4D42975CE226894A517F362E053BCE |
DLL Exports:
| Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000023241FB59996DCC4DFF000000000232
- Thumbprint:
FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: TsPubWMI.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/71
- VirusTotal Link: https://www.virustotal.com/gui/file/0e775de2bc649b7ccdc186e0c57260383d766be0d895e5b32d26e628da21b788/detection/
MIT License. Copyright (c) 2020-2021 Strontic.