l2gpstore.dll
Policy Storage dll file version info
Library on Windows 2 known copies with hashes
Is it the real l2gpstore.dll?
Original name
wlstore.dll in the file’s header: a renamed copy still carries itInstalled in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPolicy Storage dll
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\l2gpstore.dll · signed by Microsoft Windows
42e9638a78f86e0f70c5214a184b8457caebcea5456cdf35c9111b92ea7ffabd10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\l2gpstore.dll · signed by Microsoft Windows
6ee4e2407ea2ce7f2c47b5be0fe94fdea7954e587196fd3356ca78d2d77d5b7eFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.