EhStorShell.dll

  • File Path: C:\Windows\system32\EhStorShell.dll
  • Description: Windows Enhanced Storage Shell Extension DLL

Hashes

Type Hash
MD5 ADDF63C0677C3732DB270A4A95B9CC04
SHA1 FB49D4D27278ED64C5D9756DF936EB8CB51C7B2C
SHA256 CD3879743E21D32EA9CC02C94466A6055B72528C8619AEFA140124BC3565E9D9
SHA384 1C2523E4F7F95EEC1332D2E4DA4AB4C5BEE1D28A11512234C4378F73C76F15C849625AC61F62D822F6FEB629A5EEBBEA
SHA512 98C5C56121CDEE3B48533DA2620F48559A7537D6648B67297294E18271AA52958514186D7B5D2B8587D360D441A0E7566E5D4249FC131E1C274C0EB4183172E5
SSDEEP 3072:JLH4sK8Azmpqp/bcbdjw0O1YoUok/dCQXG3WxzfIThIwEEUd2f:RH4MKmpZjw/YX4QWGV8IPEUIf
IMP CCE43375273528675EF38DAD835056EB
PESHA1 C1B2E217C5AFAFA4CBAEFF5F255124F166FB8B9A
PE256 08EF7318FB6BAADB6C5CC59EDCB9A63C79CDDB967C5D54191BD718BFEFF67C55

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EhStorShell.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/cd3879743e21d32ea9cc02c94466a6055b72528c8619aefa140124bc3565e9d9/detection/

MIT License. Copyright (c) 2020 Strontic.