srm_ps.dll

  • File Path: C:\Windows\SysWOW64\srm_ps.dll
  • Description: Microsoft FSRM internal proxy/stub

Hashes

Type Hash
MD5 C8EC6B0D861566A0704FC0395C994811
SHA1 FB52EC86B54F8892D3D36204D32EAF60C107D0F0
SHA256 0328346A41ABA91471EE8088CEBAE914ADC0CD843C039218154526786DE38CED
SHA384 EE4E92F25E0A55CC5E39599779B34B10D1AC237CA6A28B697E03F8C79E58C356278EE95D514B74A95B398B7FFAD3AFCB
SHA512 566349DE054EC64FF31491A454845DD6EA4687DBBE102A9183B83B439012FDC84330D9700C423186811B4C97B1ABAC1807BA5CE1EFC813F6A84FF82D87F0612F
SSDEEP 192:KpWf64YJKBHvY0ResFJna+JWvKprVAGru/WrrPzkWwVIJWwR:KcS4ISw6nJna+JWKprBrhrr4WwVIJW
IMP FDF06A149933D851DE344009AE2D452C
PESHA1 79C61286AD86A20C9B837DB4BE142EF73FA350AB
PE256 B16927D4D29AF3D5EC31D5FCF716978F0C382DAAB1BF2F4FECAB6D99CB998E2B

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 4 Exported Function
GetProxyDllInfo 5 Exported Function
DllRegisterServer 3 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SRM_PS.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/0328346a41aba91471ee8088cebae914adc0cd843c039218154526786de38ced/detection/

MIT License. Copyright (c) 2020-2021 Strontic.