Windows.StateRepositoryPS.dll
Windows StateRepository Proxy/Stub Server file version info
Library on Windows 2 known copies with hashes
Is it the real Windows.StateRepositoryPS.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows StateRepository Proxy/Stub Server
2 known copies
10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\Windows.StateRepositoryPS.dll · signed by Microsoft Windows
557cca430c95dcce9c3a5e6a7cce1ef3f9d6c41aed0ebc999c6901b643fc68e710.0.19041.508 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Windows.StateRepositoryPS.dll · signed by Microsoft Windows
cc35e4f3f0affc0c3b6107fb041aad01528e6b5cc4bb691db200ff7596bc79dbFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.