POSyncServices.dll

  • File Path: C:\Windows\system32\POSyncServices.dll
  • Description: Change Tracking

Hashes

Type Hash
MD5 D09EB644F7F11CB390D8C163715E56DC
SHA1 AA72DB9DDB474C1F1F006F5AAFB30AF822824CFA
SHA256 606AA896580D953834B1B804278EA0A498989771E5B72DD2EB86F21F71E8FD3A
SHA384 D5DEA9E9890F0A72120D035EF2497013FDA12831ABBC5D6793A729DE3C5F66DF2FD5DFBE15418A07736E71466C8594AC
SHA512 E72E863C6632C4D243B780E851E6A6850F0E07B35902932530CC2E818C6E1011F99060AD5BAE018F4A3A63C8EDDA000FB6B34C01F9BDAF28EDC3046A7C8CFD0F
SSDEEP 1536:wFleJR0vBdVE8HXP6/AbxqRqT5YFVvqZSIB05IZi:a80vLc0i+zeI8
IMP 197762169811AC3EDF3AF4065A8DD1ED
PESHA1 6CC9CE8BFB10C6C4FE5D4F0DC0661C0DA7809C7A
PE256 0CDFBF22848BBA018A68EA403B89BADA506855BDB17A97B554C5ED68A7078D47

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PoSyncServices.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/606aa896580d953834b1b804278ea0a498989771e5b72dd2eb86f21f71e8fd3a/detection/

MIT License. Copyright (c) 2020 Strontic.