PlaySndSrv.dll

  • File Path: C:\Windows\SysWOW64\PlaySndSrv.dll
  • Description: PlaySound Service

Hashes

Type Hash
MD5 DF45A85B0A4F1E8AF4BB77457DE98B4B
SHA1 3CF5ADD230556264CE71D6B8D1F6B23740B8B375
SHA256 B5CB071A374FBDE22B6440996815DC6E715882D0D03877990C02502515BDBD72
SHA384 3B345F6A9D31438CB7DF7750940C6511DD026073D31DD098C493D13CF0331FA7E16FFA8877613ACA34853607D81E1868
SHA512 C1804865B98F19363EC48A06FC089FE49BFA49F3DABA3993ACB5F00580DAFE21A63283295140D185D6BE5B0BA75D77F0F55FBB62431950A130D1E855F9B3F6D6
SSDEEP 1536:TFlEGqonIT6nm7KGXnuJQoW6kN4Az/wVpTVda6MyTj7HD+4Be5nj7HD+8:Bwj7LBHNVLwzyuT3zAn3
IMP 38E7898047A8BF1FA5D7B5D0C62BBD13
PESHA1 53833A95054756120279C70C3C668EAA67C3CB0C
PE256 CFB7B9EE4418CB52C21BEB2329D5DD41EE6E2EC853359215850A76516207BDC1

DLL Exports:

Function Name Ordinal Type
PlaySoundServerInitialize 3 Exported Function
PlaySoundServerTerminate 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PlaySndSrv.Dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/64
  • VirusTotal Link: https://www.virustotal.com/gui/file/b5cb071a374fbde22b6440996815dc6e715882d0d03877990c02502515bdbd72/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\PlaySndSrv.dll 71

MIT License. Copyright (c) 2020 Strontic.