api-ms-win-core-xstate-l2-1-0.dll

  • File Path: C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll
  • Description: ApiSet Stub DLL

Hashes

Type Hash
MD5 42DC903598FF9D2BFB92D3F1F1563A92
SHA1 7A612D66D11916640B9781168C723F5DB7212839
SHA256 583BE047AA83CCE2E8950F5F550DABC5F7CB5957860316E3F409BFAFB10B963C
SHA384 EB22DCC7E6971456979BB48C7752A8D7A408FE8C066D2D117D66E8796858BF6533B564CCA2F1928EB2901297455703F0
SHA512 F6CC6EDB7D84A1D24DCDD38F1FE3E14D83CD62EBAB83CC87A34F0026B21E4CC2DC7E85A200D15405DD153B92FDE08A05F0C8F16B77AF8D0239567273E9A5C46F
SSDEEP 192:uf5bIWVghWuT71ojDBQABJEcNGoqnajMHxxBNT0662ON/:uf5bIW2hWfDBRJEcNVlI663U/
PESHA1 D58CE27A5F9E4796168450A4E39CF3D3073E0070
PE256 CC052700CD6765A4019B493059FA7A9E6F65EDC3A190597B4242D7102BF3F0B6

DLL Exports:

Function Name Ordinal Type
InitializeContext 4 Exported Function
LocateXStateFeature 5 Exported Function
SetXStateFeaturesMask 6 Exported Function
CopyContext 1 Exported Function
GetEnabledXStateFeatures 2 Exported Function
GetXStateFeaturesMask 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000004EA1D80770A9BBE94400000000004E
  • Thumbprint: DF3B9B7E5AEA1AA0B82EA25F542A6A00963AB890
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: apisetstub
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.10240.16384 (th1.150709-1700)
  • Product Version: 10.0.10240.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/583be047aa83cce2e8950f5f550dabc5f7cb5957860316e3f409bfafb10b963c/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\csrss.exe 35
C:\Windows\SysWOW64\backgroundTaskHost.exe 32

MIT License. Copyright (c) 2020-2021 Strontic.