PrintManagementProvider.dll
Print WMI Provider file version info
Library on Windows 2 known copies with hashes
Is it the real PrintManagementProvider.dll?
Installed in
C:\Windows\system32\wbem\C:\Windows\SysWOW64\wbem\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPrint WMI Provider
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wbem\PrintManagementProvider.dll · signed by Microsoft Windows
363fc6d3447572affb6e0d78d9416f91c4f3e650e755a332d1c1e629d8a3dc2a10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\wbem\PrintManagementProvider.dll · signed by Microsoft Windows
fa0c05461c7d0df91079fa0eb519e10910587c84fa66419e45f9d0f4c424eba1From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.