RDSPnf.exe
- File Path:
C:\Windows\system32\RDSPnf.exe - Description: Windows All-User Installer Profile Processing Module
Hashes
| Type | Hash |
|---|---|
| MD5 | 2D6D03BCF7356C0FAC6503DF461ED7F7 |
| SHA1 | 10894E9C7FD89A390E9AC104507140BBDCE51B39 |
| SHA256 | BF40CB2B501FB0D61CEEA0EC56967A7599447ED2480407620CB4BAA1668F5F6C |
| SHA384 | 8B56A3248BBF9AE9350F95F50CBFF1704E6DA8ABACB0A384BA1EA550075F5C7ECD279D44ABC2E32DBD891B22F3FD1F3D |
| SHA512 | 6D8A5313DD4E292C4D6D4A521558AFBF57804DF5E92B2ED2AEA8C744CB625FFA7678D4487BF162AA413AD16C0E8A972C430E9916C5B1CD9EE82FFAD227A0EB13 |
| SSDEEP | 1536:MbFlAu/QGfcAUMnphJNAoLNIW56HursL/feLihAKOpUoYsVik+TMhZfyo8DdyvWc:Mbd/5/1LNMPLHe+hFOMANyo8DUf9 |
| IMP | 98BF2FB38C5038CB4939587E47F8A01B |
| PESHA1 | 0B7CD68D446712F69460EC0A4EAC1BA59C9F1ED9 |
| PE256 | 57B17B8150FDD0BA966051D0C847F8712A0A0A6A27AF63E843295DA6FE9A7176 |
Runtime Data
Open Handles:
| Path | Type |
|---|---|
| (RW-) C:\Users\user | File |
| \BaseNamedObjects__ComCatalogCache__ | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000004.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro | Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \RPC Control\DSEC3DC | Section |
Loaded Modules:
| Path |
|---|
| C:\Windows\System32\ADVAPI32.dll |
| C:\Windows\system32\AppXAllUserStore.dll |
| C:\Windows\system32\AppXDeploymentClient.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\clbcatq.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\system32\DNSAPI.dll |
| C:\Windows\system32\FirewallAPI.dll |
| C:\Windows\system32\fwbase.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\IMM32.DLL |
| C:\Windows\SYSTEM32\IPHLPAPI.DLL |
| C:\Windows\System32\kernel.appcore.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\System32\NSI.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\OLEAUT32.dll |
| C:\Windows\system32\rdsappxhelper.dll |
| C:\Windows\system32\RDSPnf.exe |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\system32\StateRepository.Core.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\System32\win32u.dll |
| C:\Windows\System32\WS2_32.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266 - Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: RDSPnf.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1432 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1432
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/bf40cb2b501fb0d61ceea0ec56967a7599447ed2480407620cb4baa1668f5f6c/detection/
MIT License. Copyright (c) 2020-2021 Strontic.