Unistore.dll

File Path: C:\Windows\system32\Unistore.dll
Description: Unified Store

Hashes

Type	Hash
MD5	`4AB4C17352889F339B5CFF7B46F745E6`
SHA1	`F7EF3D9345271800E72FEE69F4AE36F533DF4695`
SHA256	`15DFAC383101846D4055E15CF123707EA1C74FC6B244CF6FFA5EB37A9F1D2787`
SHA384	`4E9A3889612CA72E09AFADC4FD6975893F181889C80C645AE3EA74798A62AD18BA1557F24FC22C9914BE17F471ACE0CD`
SHA512	`9AC1A1397BA2BEECBE4227BEAF095D398A5F145BAE92C5860D3044C17541BF573BC435BE13A8FAC574190C09802C912D95EAECF60456ED6EAEE4811FFA95F267`
SSDEEP	`12288:+z96ikKotfz1mGVR9qT41R0Xbk7pOqtMzTaLLjyEWwT:iyKS1mGVmT4WA7pPtMzT67`
IMP	`DDFAACF6972EAB35EDC6602E691B4D98`
PESHA1	`2E3B3F8DDA7DF40C1B5BCF09B99BB92AB8E4A209`
PE256	`E70D482820681E9C6DB8BBF4CDF0435305B451A49BC6D5D04CA1B65B78FD1032`

DLL Exports:

Function Name	Ordinal	Type
`ServiceMain`	31	Exported Function
`RemoveStaleChangeTrackingDataOnStore`	30	Exported Function
`SetMaxRevisionBlobSize`	32	Exported Function
`SetUnistoreVersion`	34	Exported Function
`SetUnistoreProcessEventFilter`	33	Exported Function
`IsUSPropValPresent`	24	Exported Function
`IsUnistoreLocal`	26	Exported Function
`LowerRPCPriority`	27	Exported Function
`ReleaseUnistoreJetInstance`	29	Exported Function
`RegisterRundownProtectionForProcess`	28	Exported Function
`StartUnifiedStoreWorkForClient`	35	Exported Function
`USGetPropValsAncillaryBufferSize`	41	Exported Function
`USEventMaskToObjectType`	40	Exported Function
`USIsObjectHidden`	6	Exported Function
`USObjectTypeToEventMask`	42	Exported Function
`USIsSameObject`	7	Exported Function
`USBlobToAppRevisionBlob`	5	Exported Function
`SvchostPushServiceGlobals`	36	Exported Function
`USComparePropVals`	37	Exported Function
`USDeleteFileEx`	39	Exported Function
`USCopyPropVals`	38	Exported Function
`DisableLocalUnistore`	13	Exported Function
`DetectExistingCorruption`	12	Exported Function
`EnableLocalUnistore`	14	Exported Function
`FindMaxSeenRevisionForAppInBlob`	16	Exported Function
`EndUnifiedStoreWorkForClient`	15	Exported Function
`AppRevisionBlobToUSBlob`	1	Exported Function
`AddDWORDPropertyRestrictions`	8	Exported Function
`ClearUSCache`	9	Exported Function
`CreateStoreManagerWithToken`	11	Exported Function
`CreateStoreManager`	10	Exported Function
`GetCurrentProcessRundownProtectionIdentifier`	17	Exported Function
`GetUSDeviceStoreVolumePath`	20	Exported Function
`GetUSDeviceStoreFolderPath`	4	Exported Function
`GetUSFileStreamPath`	21	Exported Function
`IsUnistoreInProc`	25	Exported Function
`IsCEPropValPresent`	23	Exported Function
`GetRealStoreManager`	18	Exported Function
`GetDeviceStoreDefaultName`	2	Exported Function
`GetUnistoreJetInstance`	22	Exported Function
`GetUSDeviceStoreCorruptedVolumeFolderPath`	19	Exported Function
`GetUSDataFolderPath`	3	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: Unistore.dll.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/69
VirusTotal Link: https://www.virustotal.com/gui/file/15dfac383101846d4055e15cf123707ea1c74fc6b244cf6ffa5eb37a9f1d2787/detection/