ustprov.dll

  • File Path: C:\Windows\SysWOW64\ustprov.dll
  • Description: User State WMI Provider

Hashes

Type Hash
MD5 4B665416FB6693AF69A874FA53642A19
SHA1 89023ECF853797DAE93FECAF80E302E923D9A7EF
SHA256 9C31804694CA182D13C458EB13A7142352E48FB295D66CAAA4ACA155467F8B25
SHA384 936B2C55A9E1293CBCDD7243CC02F97B75D9EF9510C8D2D653389A17A9206E48FF2D78789ABCA7B08D04E5354BACDF1C
SHA512 5DC6F88308A043BA8EDE849BCB926BF5BFCDCD733D8F023AC8D778BE4A632DEC3590A942B09B677819F231474071F1C1594D631C0130F823E202F896B41EC2BB
SSDEEP 768:Crb76EeS+51//2Nn/A+3/RjwsjHc66Js6wyI6Wt:Y6zF/8v3/dwsrOG6wyI6o
IMP 7C045F79AA903A4406BFECFCCEAD55E4
PESHA1 C8EBB9FFE60ADE30462F50047C4839AF48579904
PE256 A9A74299965BE6DE7404291D8DDCA9442FDA7DD81C42ADB81D4C4C9970159B63

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: USTPROV.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/9c31804694ca182d13c458eb13a7142352e48fb295d66caaa4aca155467f8b25/detection/

MIT License. Copyright (c) 2020-2021 Strontic.