IBSProvider.dll
DISM IBS Provider file version info
Library on Windows 2 known copies with hashes
Is it the real IBSProvider.dll?
Installed in
C:\Windows\system32\Dism\C:\Windows\SysWOW64\Dism\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDISM IBS Provider
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Dism\IBSProvider.dll · signed by Microsoft Windows
bcd7105444508b457466905bb25ee9fee53628be29fb2e58014d572f647f9c8310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Dism\IBSProvider.dll · signed by Microsoft Windows
c15219f1fa3ad2f32d4dc50969e09f9d9886cefcae81f21e3f2f70f055516e4dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.