vsswmi.dll

  • File Path: C:\Windows\system32\wbem\vsswmi.dll
  • Description: WMI Provider for VSS

Hashes

Type Hash
MD5 A2BACF85B28BA2763178BFCF4FED10B9
SHA1 F515141545C1E401942484665E748CE520E792B5
SHA256 13CF26C18EBC61C01F32571C51A8E225B976125C477ED5C3EEFC7C634F0A2A44
SHA384 207280F1D860B1B2925CC059667D1261574378D5337BEE4DB3178F8706179F99D3A26B29E3638133AA99909EF777A2AC
SHA512 7EB69F5C27BB1EF299B55B7557399AC224058BFC6F92F040EB676B6B4E547225B4CF7F12C06E5C46976161F657F68B033F9D47838EA32F7B19795E795E2B61E4
SSDEEP 1536:yXxsEC37iXApliPHgU0K0WgRDdcIWLmM3mmYUXlM2y01O72+vRdfv6nyXNNwx5A7:uGRR6te80JHWqBmjff8hNFOy
IMP BA32C3E4F9735027B313CA462B53638E
PESHA1 5CF815C5EB37C4D41E74EC21D94A5E9B9444C4BB
PE256 C3CF455088FABB3822D129038054FCE46487EA5CF8B26980506C65181E47A37D

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: VSSPROV.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/13cf26c18ebc61c01f32571c51a8e225b976125c477ed5c3eefc7c634f0a2a44/detection/

MIT License. Copyright (c) 2020-2021 Strontic.