Windows 10 DLL File Information - witnesswmiv2provider.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | Witness Service WMIv2 Provider |
File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
Company: | Microsoft Corporation |
Product Name: | Microsoft® Windows® Operating System |
DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
File Size: | 27 KB |
Total Number of Exported Functions: | 9 |
Total Number of Exported Functions With Names: | 9 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 19,456 Bytes | 69.1% | Read, Execute | Code |
.data | 0x00006000 | 512 Bytes | 1.8% | Write, Read | Initialized Data |
.idata | 0x00007000 | 3,584 Bytes | 12.7% | Read | Initialized Data |
.rsrc | 0x00008000 | 1,536 Bytes | 5.5% | Read | Initialized Data |
.reloc | 0x00009000 | 2,048 Bytes | 7.3% | Read, Discardable | Initialized Data |
Static Linking
witnesswmiv2provider.dll is statically linked to the following files:msvcrt.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-processthreads-l1-1-2.dll
RPCRT4.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-security-lsalookup-l2-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
CLUSAPI.dll
RESUTILS.dll
This means that when witnesswmiv2provider.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, witnesswmiv2provider.dll won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 15 | 1,088 Bytes | 3.9% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 2 | 1,192 Bytes | 4.2% |
Total | 17 | 2,280 Bytes | 8.1% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
String ID | String Text |
---|---|
1 | Unknown |
2 | Connected |
3 | Registered |
4 | RequestedNotifications |
5 | Cancelled |
6 | Disconnected |
7 | NetworkName |
8 | ShareName |
9 | Multichannel |
100 | An internal witness error has occurred. |
101 | Unable to obtain cluster information. |
102 | Unable to find or move the specified client. |
103 | Move request was successfully sent to the specified client. |
104 | Move |
105 | The SMB client that you requested to move is optimized to connect to a specific SMB server for one or more file shares. After your requested move completes, the SMB client will attempt to move to the optimal SMB server for %1!s! |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:DllCanUnloadNow | DllGetClassObject | DllMain | DllRegisterServer |
DllUnregisterServer | GetProviderClassID | MI_Main | WitnessWmiInitialize |
WitnessWmiTerminate |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _except_handler4_common _initterm free malloc memcpy memset swprintf_s - api-ms-win-core-libraryloader-l1-2-0.dll:
KernelBase!DisableThreadLibraryCalls KernelBase!FreeLibrary KernelBase!GetModuleHandleW KernelBase!GetProcAddress KernelBase!LoadLibraryExW KernelBase!LoadStringW - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetComputerNameExW KernelBase!GetSystemDirectoryW KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter - api-ms-win-core-processthreads-l1-1-2.dll:
KernelBase!OpenProcessToken KernelBase!OpenThreadToken kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!TerminateProcess - RPCRT4.dll:
I_RpcExceptionFilter NdrClientCall4 NdrServerCall2 RpcBindingFree RpcBindingFromStringBindingW RpcBindingInqAuthClientW RpcBindingSetAuthInfoExW RpcBindingVectorFree RpcEpRegisterW RpcEpResolveBinding RpcEpUnregister RpcImpersonateClient RpcMgmtInqServerPrincNameW RpcRevertToSelf RpcServerInqBindings RpcServerInqCallAttributesW RpcServerInqDefaultPrincNameW RpcServerRegisterAuthInfoW RpcServerRegisterIfEx RpcServerUnregisterIfEx RpcServerUseProtseqEpW RpcStringBindingComposeW RpcStringFreeW - api-ms-win-eventing-classicprovider-l1-1-0.dll:
ntdll!EtwTraceMessage - api-ms-win-security-base-l1-2-0.dll:
KernelBase!AccessCheck KernelBase!AddAccessAllowedAce KernelBase!DuplicateTokenEx KernelBase!GetLengthSid KernelBase!GetSecurityDescriptorOwner KernelBase!GetTokenInformation KernelBase!ImpersonateLoggedOnUser KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!RevertToSelf KernelBase!SetSecurityDescriptorDacl KernelBase!SetSecurityDescriptorGroup KernelBase!SetSecurityDescriptorOwner - api-ms-win-eventing-provider-l1-1-0.dll:
ntdll!EtwEventWrite - api-ms-win-security-lsalookup-l2-1-1.dll:
advapi32!LookupAccountNameW - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap ntdll!RtlAllocateHeap ntdll!RtlFreeHeap - api-ms-win-core-localization-l1-2-1.dll:
KernelBase!FormatMessageW - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!Sleep - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - CLUSAPI.dll:
CloseCluster CloseClusterNode CloseClusterResource ClusterCloseEnum ClusterOpenEnum ClusterResourceControl GetClusterInformation OpenCluster OpenClusterNode - RESUTILS.dll:
ResUtilGetCoreClusterResources