PackageStateRoaming.dll

  • File Path: C:\Windows\system32\PackageStateRoaming.dll
  • Description: Package State Roaming

Hashes

Type Hash
MD5 66CC6BCB13F7BF8D7F02F60A5D7BA7BF
SHA1 848693A2910733794C0BDCBC1907E783355B094B
SHA256 0A7E184EA7AD4E1899075C7BB843EF497F12FBFBF695F287C28F63073271AF63
SHA384 033171E269568F60A4D4EEEFB9579DE6832321FD1931009A468B43176A16A859145F106459CC15805F4027B2FA0D35B0
SHA512 09B527E4F17DFE74A8DC5F2E95F53A4FBD8FF10DC2C0D73243571CCF4BA70D3B384FC7A52B7A4AE38877B433B6B1243C901F66F76CC86A88062E1E33CD54F673
SSDEEP 6144:psb7+wpuqTuOLzd//Ic82n4Fs/57z8kcSbbbjbbbLFUyHMs9XUyvl9mRu:psb7+Y1Lzd//IpM4Fs/r3
IMP 6DCA8F20C4325599DF69D8B6CB225A9B
PESHA1 7560A17B0DC88804A9E0A8EB730F7C74B859CB2F
PE256 8F3D5237E9F8E9B4E52FC26FA5959981B024F941DDC362F6968DA4E4C20F89AB

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PackageStateRoaming.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/0a7e184ea7ad4e1899075c7bb843ef497f12fbfbf695f287c28f63073271af63/detection/

MIT License. Copyright (c) 2020-2021 Strontic.