Windows.StateRepositoryClient.dll

  • File Path: C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
  • Description: Windows StateRepository Client API

Hashes

Type Hash
MD5 44088E6A7EEBE95D310E2ADEB9BD03D5
SHA1 12CB6E5601E359716E0FF3B6181048016610B425
SHA256 C1666221798263B1CACD43DC50104821D3805D485D470E5BE490D15670AE3E3E
SHA384 B105B262FCF4EC9FEBFF5AE535F7A3D210C80E7A85778E2998FDB35C112B483F1679ED881D95C44599743CC2CD0AA4A6
SHA512 FEF55D1B0A96C5694A358DBA00C247FAA46379386CA3BE2A82ED32CCF8A94AC27554F78E4FCBC4C80C915353863F49F8EF0557BAA6A0CBFB7BDF2B3C297FA900
SSDEEP 3072:P0hohVs5w8q+2cqHnhGdLUdHJwTHRJYHzq+rvl6OL7bQs5WtZyj2AYS+nK6O1L/f:s6s5htLUdHJwrRJF+rsOW4
IMP 7313DEB1884513B7AD8D986A78DBADA7
PESHA1 BFFAB2E509DE6B4C61C7FA9831733FED5B910941
PE256 7BE98005E982A9A76847416EE50CDB4856BEE17C1355C425253683E1298ECAD2

DLL Exports:

Function Name Ordinal Type
SRPropertySetToDictionary 16 Exported Function
SRRemovePackageStatus 17 Exported Function
SRRemovePackageStatusForUserFromToken 18 Exported Function
SRGetPackageStatusForUserFromToken 13 Exported Function
SRGetPackageStatusForUserSid 14 Exported Function
SRGetStagedPackageOrigin 15 Exported Function
SRUpdatePackageStatusForUserFromToken 22 Exported Function
SRUpdatePackageStatusForUserSid 23 Exported Function
StateRepositoryDoMaintenanceTasks 24 Exported Function
SRRemovePackageStatusForUserSid 19 Exported Function
SRRepair 20 Exported Function
SRUpdatePackageStatus 21 Exported Function
SRCheckIntegrity 5 Exported Function
SRDictionaryFree 6 Exported Function
SRDictionaryToPropertySet 7 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetActivationFactory 3 Exported Function
DllGetClassObject 4 Exported Function
SRGetIsEffectiveSupportedUsersMultiple 10 Exported Function
SRGetPackageOriginForUser 11 Exported Function
SRGetPackageStatus 12 Exported Function
SRGetEffectivePackageStatusForUserFromToken 8 Exported Function
SRGetEffectivePackageStatusForUserSid 9 Exported Function
SRGetExternalLocation 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Windows.StateRepositoryClient.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/c1666221798263b1cacd43dc50104821d3805d485d470e5be490d15670ae3e3e/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Windows.StateRepositoryBroker.dll 47
C:\Windows\system32\Windows.StateRepositoryClient.dll 49
C:\Windows\SysWOW64\Windows.StateRepositoryBroker.dll 46
C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll 30

MIT License. Copyright (c) 2020-2021 Strontic.