ChsRoaming.DLL

  • File Path: C:\Windows\system32\InputMethod\CHS\ChsRoaming.DLL
  • Description: Microsoft IME

Hashes

Type Hash
MD5 C6A2601B3AC75DB6B098D20527A8E10A
SHA1 023D3ACDDF41AF9BA2F7BB33FC9FCF956F644253
SHA256 F4A276A6F2D43FF711A2FDFFF76A0929432BB6D883CBF73C52B9061FDC81A964
SHA384 ADDACC7D8CC5C17FAF858CB1ACED4441BAC2F99559C23ADFD535E436199D12A478E08ACD55D83C4CD33F539AFEA78C46
SHA512 B5B3B3D7B7F73E5DB5F603ADBE36FE7091F1C5EAE881D792CE38F958353238DF35FD6614ECC9283F61B2A2BF5EB56140F4D9A8BD6AB43D0F7BB17424FCD4D6AE
SSDEEP 6144:yqwqiFovCSLN1roQzco83tr9OZ9T7/pzpt0:QlevCSB1lQo8dZO
IMP 1A05827F72415B6EF652A664416E1C0B
PESHA1 271FA154BEB9D652A80C8632049EAE829BA9A5C8
PE256 0EFFFA486D851DC780D3A5871E58203872ABF34498CDF1E328FE6B24CD671474

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ChsRoaming.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/f4a276a6f2d43ff711a2fdfff76a0929432bb6d883cbf73c52b9061fdc81a964/detection/

MIT License. Copyright (c) 2020-2021 Strontic.