vsswmi.dll

  • File Path: C:\Windows\SysWOW64\wbem\vsswmi.dll
  • Description: WMI Provider for VSS

Hashes

Type Hash
MD5 EC861AE439CFE189BFA637517184B78F
SHA1 72AE5AEFA84BBDD0952BF6582C62FAFBEB0BAE6F
SHA256 6E488C86625F4AAB4F5B0B4D97B549B482EABCB1AC5A395A3E7A2CCD7E170CFB
SHA384 FC4E6549BEB0C80E0CE0EF8C19F8B192CE816B7D046EE74F05259F31116FC867F330556BC6DB5DF2FA73F8B978459DB1
SHA512 EFBBE54846E0158CE89108BE2E4E3B324C4BAFFF0590AB3423FCE5A26DDEE8987DB0C0B476FCA3B70706A94D9496AE9CB32B92E7CFAC6058F86962B50284081F
SSDEEP 1536:tqD2PHZZ8YcNpUy6JLxlU+3HQWAhI3Db+11YHKm8/rCgldYQXJv5:QUZSNjKc+3PAhg81OJs2gbYQXJv
IMP C723F1C7B773FBBFC7C82CC3B588A332
PESHA1 38163D8384ECDE831F46D722C041E7C4B2E34495
PE256 68FB1DD2E54B76BFEDA6B38A82416EF061CACC66AD85F86524BE076D23DCA7B4

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: VSSPROV.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/6e488c86625f4aab4f5b0b4d97b549b482eabcb1ac5a395a3e7a2ccd7e170cfb/detection/

MIT License. Copyright (c) 2020-2021 Strontic.