psmsrv.dll

  • File Path: C:\Windows\system32\psmsrv.dll
  • Description: Process State Manager (PSM) Service

Hashes

Type Hash
MD5 BB5F7158B36E065CFBAEFD6E6E245B1F
SHA1 4D3C42B6FDA00D27414CDF277EBFFE4D998B37AC
SHA256 69409DC4972D0C31C79B6833584D9B197BB36C7B94F9010CD3D9AE04441EB68D
SHA384 EC5A54E124137D6D7D3FF48B3B7108915593023FDB7B01123061E1B94E93DF0905B549B9D818F3DAD807AA1E6C338A59
SHA512 CB9057F167EC193473916167A76E7A14B281CACFE774DF7D47E9D599AAB986BAFAF529F813966B9D851A7CA3F85EF5C8CDB4630E2025A68377B9F105477295C9
SSDEEP 6144:UuDVkX0eOMdw6PsqmvT0KI8zD3JcNT6u4RVZy7VW+I:UuDVEfVmvzI4ZMW+
IMP 84470656F0719194CEB2FC12E3895DA1
PESHA1 CC7FE3A39FCBE0EBB1242CF221DB3299D0238C46
PE256 4F93DBB83A330845FB3644BF2D975DB0D5B4155FF04D3B0F7E6A23AAF231DA82

DLL Exports:

Function Name Ordinal Type
SvchostPushServiceGlobals 6 Exported Function
ServiceMain 5 Exported Function
Ordinal1 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: psmsrv.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/69409dc4972d0c31c79b6833584d9b197bb36c7b94f9010cd3d9ae04441eb68d/detection/

MIT License. Copyright (c) 2020-2021 Strontic.