VaultRoaming.dll

  • File Path: C:\Windows\system32\VaultRoaming.dll
  • Description: Vault Roaming

Hashes

Type Hash
MD5 C65FCBE182A6409AD2A219D09EEC06C3
SHA1 611C6EB78C4DFE5A60D94458B24D99B0656F2EEE
SHA256 A6F63E1C92ADC86FC17073C81BCF8C501EBC97969399D7087C0930799A11616A
SHA384 30858EE71DC8D9A8F6881116B71EFF256F8860C30B25C91533D8048186B70772DB573FB0ECCCF097AA6B260B876A70FC
SHA512 2A06B6C7B7342027886CA6D480FA683AA6AFD3C1C8BE89A981CFF2A25E5B52C0AD1FC3363B6F81A20966339E263507245176D99186D26F600BBD555448C99CB1
SSDEEP 3072:t3jgTUwjTnxmJwp5eeB5HCoTUdcNIpCvx2BeMbC1uo50mrtgxc:t3jgTUwjFmJueeTHCoIdcNIYx2wMbq0W
IMP CE205AF6EEBC891490D01B369DBF34B7
PESHA1 A2768044890699C195CC3DD90CC3A0E3B6EB1DF5
PE256 AA269DD70A723EA20483C07DA1F36519E08BA486DC3C75F6E74A997981606108

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 4 Exported Function
DllUnregisterServer 5 Exported Function
DllInstall 3 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: VaultRoaming.dll.mui
  • Product Name: VaultRoaming
  • Company Name: Microsoft
  • File Version: 1.0.0.1
  • Product Version: 1.0.0.1
  • Language: English (United States)
  • Legal Copyright: (c) Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/a6f63e1c92adc86fc17073c81bcf8c501ebc97969399d7087c0930799a11616a/detection/

MIT License. Copyright (c) 2020 Strontic.