Windows.StateRepositoryCore.dll

  • File Path: C:\Windows\SysWOW64\Windows.StateRepositoryCore.dll
  • Description: Windows StateRepository API Core

Hashes

Type Hash
MD5 4DA9D6305A1EE833B10EC20D0AA3A616
SHA1 5CA9BBAB3FCFF163083127C58E5A4B43695D4DE9
SHA256 4E46552B9FD53292444C2B3F830218E2E81F364193ED5102399744EB9015B65E
SHA384 FABFF17F589D34EC115C6CEBAAA9B2FE2C79BED1A7B1747EA53A3F617CD3DCBB44184CA620282B7068B7F8EB86EDE63D
SHA512 5BB8D3D9B0367C5CD71A589A38964E99F3A2D818F10F552FCE6EB5F049AB5A2B39C00DFF6FF1E61A98654D780D9B9D538A6343EB355B6AB46AAE068DF2403C4E
SSDEEP 768:sLxPmrbTqAhoQfq0pxdQUpR+aAFJ+Iz15p2qr6wD1PE:sLxPmr7a70p4UpRRAF4Iz15pBPE
IMP 7D4B9D031C1F409904E7D4912427B8E7
PESHA1 797DCEB4FE51E8B980F3F4D4DFE8E37147F9BAA8
PE256 8A194553B0920E35A3616731781F21AA472AFEDA649CA0813E10B778B13EE9F8

DLL Exports:

Function Name Ordinal Type
SRCacheContext_SetField_MultiString 17 Exported Function
SRCacheContext_SetField_String 18 Exported Function
SRCacheContext_SetField_UInt32 19 Exported Function
SRCacheContext_OpenSubContext 16 Exported Function
SRCacheContext_HasSubKeys 13 Exported Function
SRCacheContext_IsEmpty 14 Exported Function
SRCacheContext_Open 15 Exported Function
SRCacheContext_SetField_UInt64 20 Exported Function
SRCacheManager_Open 25 Exported Function
SRCacheManager_SetProperty_UInt32 26 Exported Function
SRCacheManager_SetProperty_UInt64 27 Exported Function
SRCacheManager_GetProperty_UInt64 24 Exported Function
SRCacheManager_Close 21 Exported Function
SRCacheManager_DeleteContext 22 Exported Function
SRCacheManager_GetProperty_UInt32 23 Exported Function
SRCacheContext_GetField_UInt64 12 Exported Function
SRCacheContext_Close 1 Exported Function
SRCacheContext_Create 2 Exported Function
SRCacheContext_CreateSubContext 3 Exported Function
SRCache_GetDefaultAccountSid 31 Exported Function
SRCache_AllocStringBuffer 28 Exported Function
SRCache_DuplicateString 29 Exported Function
SRCache_Free 30 Exported Function
SRCacheContext_Delete 4 Exported Function
SRCacheContext_GetField_MultiString 9 Exported Function
SRCacheContext_GetField_String 10 Exported Function
SRCacheContext_GetField_UInt32 11 Exported Function
SRCacheContext_EnumerateIndex 8 Exported Function
SRCacheContext_DeleteField 5 Exported Function
SRCacheContext_DeleteIfEmpty 6 Exported Function
SRCacheContext_EnumerateData 7 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Windows.StateRepositoryCore.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.508 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/4e46552b9fd53292444c2b3f830218e2e81f364193ed5102399744eb9015b65e/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\PasswordOnWakeSettingFlyout.exe 33

MIT License. Copyright (c) 2020-2021 Strontic.