Unistore.dll

  • File Path: C:\Windows\system32\Unistore.dll
  • Description: Unified Store

Hashes

Type Hash
MD5 4AB4C17352889F339B5CFF7B46F745E6
SHA1 F7EF3D9345271800E72FEE69F4AE36F533DF4695
SHA256 15DFAC383101846D4055E15CF123707EA1C74FC6B244CF6FFA5EB37A9F1D2787
SHA384 4E9A3889612CA72E09AFADC4FD6975893F181889C80C645AE3EA74798A62AD18BA1557F24FC22C9914BE17F471ACE0CD
SHA512 9AC1A1397BA2BEECBE4227BEAF095D398A5F145BAE92C5860D3044C17541BF573BC435BE13A8FAC574190C09802C912D95EAECF60456ED6EAEE4811FFA95F267
SSDEEP 12288:+z96ikKotfz1mGVR9qT41R0Xbk7pOqtMzTaLLjyEWwT:iyKS1mGVmT4WA7pPtMzT67
IMP DDFAACF6972EAB35EDC6602E691B4D98
PESHA1 2E3B3F8DDA7DF40C1B5BCF09B99BB92AB8E4A209
PE256 E70D482820681E9C6DB8BBF4CDF0435305B451A49BC6D5D04CA1B65B78FD1032

DLL Exports:

Function Name Ordinal Type
ServiceMain 31 Exported Function
RemoveStaleChangeTrackingDataOnStore 30 Exported Function
SetMaxRevisionBlobSize 32 Exported Function
SetUnistoreVersion 34 Exported Function
SetUnistoreProcessEventFilter 33 Exported Function
IsUSPropValPresent 24 Exported Function
IsUnistoreLocal 26 Exported Function
LowerRPCPriority 27 Exported Function
ReleaseUnistoreJetInstance 29 Exported Function
RegisterRundownProtectionForProcess 28 Exported Function
StartUnifiedStoreWorkForClient 35 Exported Function
USGetPropValsAncillaryBufferSize 41 Exported Function
USEventMaskToObjectType 40 Exported Function
USIsObjectHidden 6 Exported Function
USObjectTypeToEventMask 42 Exported Function
USIsSameObject 7 Exported Function
USBlobToAppRevisionBlob 5 Exported Function
SvchostPushServiceGlobals 36 Exported Function
USComparePropVals 37 Exported Function
USDeleteFileEx 39 Exported Function
USCopyPropVals 38 Exported Function
DisableLocalUnistore 13 Exported Function
DetectExistingCorruption 12 Exported Function
EnableLocalUnistore 14 Exported Function
FindMaxSeenRevisionForAppInBlob 16 Exported Function
EndUnifiedStoreWorkForClient 15 Exported Function
AppRevisionBlobToUSBlob 1 Exported Function
AddDWORDPropertyRestrictions 8 Exported Function
ClearUSCache 9 Exported Function
CreateStoreManagerWithToken 11 Exported Function
CreateStoreManager 10 Exported Function
GetCurrentProcessRundownProtectionIdentifier 17 Exported Function
GetUSDeviceStoreVolumePath 20 Exported Function
GetUSDeviceStoreFolderPath 4 Exported Function
GetUSFileStreamPath 21 Exported Function
IsUnistoreInProc 25 Exported Function
IsCEPropValPresent 23 Exported Function
GetRealStoreManager 18 Exported Function
GetDeviceStoreDefaultName 2 Exported Function
GetUnistoreJetInstance 22 Exported Function
GetUSDeviceStoreCorruptedVolumeFolderPath 19 Exported Function
GetUSDataFolderPath 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Unistore.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/15dfac383101846d4055e15cf123707ea1c74fc6b244cf6ffa5eb37a9f1d2787/detection/

MIT License. Copyright (c) 2020 Strontic.