RMSRoamingSecurity.dll

  • File Path: C:\Windows\system32\RMSRoamingSecurity.dll
  • Description: Roaming Security RMS implementation

Hashes

Type Hash
MD5 3BFA0E386CC2190D1255FD1E83419C0B
SHA1 859A90200A3B6362CA16F973D8E96CC021300D68
SHA256 66BBBFDC31B119A310DB4B95880A61D74085EC3EB11C67DFFAA8454B4CDED53E
SHA384 CA099BBFF2B45FAF7679D733582D79FAB615FD7AB74441A88206438D04CEE4C3C1831807D0DE6E4BD6C5D88A2AA24508
SHA512 869A3208C9F15D4380C680EFED6E77B25F8A4F232E238298F950E7BF69CD296AE0F4DC3C95923B64BFA66E7C222B8AB6C4E8ED8A54AD88604537E72F92ED2CE0
SSDEEP 1536:CbM8rtvzX1MjaAu4K3OQpiOvCs3peXwuyWbnMK+R0+x6ZOsnMqyuXl3Chyw40z6F:J8MjaSCvCs3peUML+e+8ZOsMM1
IMP F99EBF1F0167634C7A403D3FCB64FB66
PESHA1 3568A1AD38688758549B314670DD0796919C4198
PE256 28EB322D0D1F17C1A5B8EFF962861B0A08EEE02861FEB518912CB19925823D4E

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RMSRoamingSecurity.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/66bbbfdc31b119a310db4b95880a61d74085ec3eb11c67dffaa8454b4cded53e/detection/

MIT License. Copyright (c) 2020 Strontic.