Windows.StateRepositoryClient.dll

  • File Path: C:\Windows\system32\Windows.StateRepositoryClient.dll
  • Description: Windows StateRepository Client API

Hashes

Type Hash
MD5 71BFE3BC0461649E93AFB169F59013B3
SHA1 86EDA9BE786DC03338A8D2BA19B7E054B6ACAC0E
SHA256 FBEDC83EB6B0B06F587F26AD6EB44BCD1BE014CB92732DF2C215400C7763C592
SHA384 0638AE70ABCC227D348608FBAEC2680336BF3B7BEA201CBBB066F3B445F3BBCCB4ABFE578E975DC51F2F37C022DFA51B
SHA512 8A0EF5B8EFE8C40B113C38FF34C41F0554CAE1DD22D2A85CDC949AD0A9D7E1BDA647A91E75C717D043A6DB8FE836DCCAABEF4FB9769BBB2FE00B412668F7B565
SSDEEP 3072:TQF7pne/Vtp4A88+9jdncwSHuPcLLDTdgR37z7bQs5WtZyj2AYS+nK6O1L/VkOxX:cJKtx+TcwSHuPcLBuiiN
IMP FDDFB0037D76093C8D1F11FBFB4D0882
PESHA1 ACE7DE30E1060F00CF6588E5EF12E4B51AD62422
PE256 42FFC89DAF1A56A1722106067F361B389952F7AB937588E62A80695AAB1BBCA1

DLL Exports:

Function Name Ordinal Type
SRPropertySetToDictionary 16 Exported Function
SRRemovePackageStatus 17 Exported Function
SRRemovePackageStatusForUserFromToken 18 Exported Function
SRGetPackageStatusForUserFromToken 13 Exported Function
SRGetPackageStatusForUserSid 14 Exported Function
SRGetStagedPackageOrigin 15 Exported Function
SRUpdatePackageStatusForUserFromToken 22 Exported Function
SRUpdatePackageStatusForUserSid 23 Exported Function
StateRepositoryDoMaintenanceTasks 24 Exported Function
SRRemovePackageStatusForUserSid 19 Exported Function
SRRepair 20 Exported Function
SRUpdatePackageStatus 21 Exported Function
SRCheckIntegrity 5 Exported Function
SRDictionaryFree 6 Exported Function
SRDictionaryToPropertySet 7 Exported Function
DllCanUnloadNow 2 Exported Function
DllGetActivationFactory 3 Exported Function
DllGetClassObject 4 Exported Function
SRGetIsEffectiveSupportedUsersMultiple 10 Exported Function
SRGetPackageOriginForUser 11 Exported Function
SRGetPackageStatus 12 Exported Function
SRGetEffectivePackageStatusForUserFromToken 8 Exported Function
SRGetEffectivePackageStatusForUserSid 9 Exported Function
SRGetExternalLocation 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Windows.StateRepositoryClient.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/fbedc83eb6b0b06f587f26ad6eb44bcd1be014cb92732df2c215400c7763c592/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Windows.StateRepositoryBroker.dll 54
C:\Windows\SysWOW64\Windows.StateRepositoryBroker.dll 55
C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll 49
C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll 27

MIT License. Copyright (c) 2020-2021 Strontic.