RTWorkQ.dll

  • File Path: C:\Windows\SysWOW64\RTWorkQ.dll
  • Description: Realtime WorkQueue DLL

Hashes

Type Hash
MD5 25F4BAE1FE4989FFB5A2EC6513D9EA0F
SHA1 18D0FCA792649EC7B694F750242BD33A81A1E00F
SHA256 EB07722EF244BB0A5C057E060DBA22482C64BDBDB2008B358D04290F2A96E157
SHA384 2AB57D697902F9E3EF38A9B5CFB203D7B51E9D5458973467A2AA30033F3B846BD87CFDC0F84F799543B337E7653B3DA5
SHA512 24714F40D5894E164A18C761EE2C29D03F6A285D0C6E3CD23929C2ADC05B0DE9D07536B74D53F8D7906568D542DC2DF932F779AEDAFD29492A3C33E1B66A6EB9
SSDEEP 3072:mkZiXzGNUNJhBcyZE7L9nj4/3RBQfvhh3oQa2JCwNuTMpR2F0ajJSB:mkZQzGNuJhBcqvRBQfvhh3oQa2eMW14
IMP 2FA46369E7EA294FA8C885F76E008FA2
PESHA1 F10FBB1682D105DE3E195C3CC65B89FB3E00D6F4
PE256 8599674825C5BDBECF013D2522A9310CB4D459B7AB0775F5B79D9ECBF15C4FEE

DLL Exports:

Function Name Ordinal Type
RtwqRemovePeriodicCallback 26 Exported Function
RtwqRegisterPlatformWithMMCSS 25 Exported Function
RtwqSetDeadline 29 Exported Function
RtwqScheduleWorkItem 27 Exported Function
RtwqRegisterPlatformEvents 24 Exported Function
RtwqPutMultipleWaitingWorkItem 21 Exported Function
RtwqLockWorkQueue 20 Exported Function
RtwqPutWorkItem 23 Exported Function
RtwqPutWaitingWorkItem 22 Exported Function
RtwqUnlockWorkQueue 35 Exported Function
RtwqUnlockPlatform 34 Exported Function
RtwqUnregisterPlatformFromMMCSS 37 Exported Function
RtwqUnregisterPlatformEvents 36 Exported Function
RtwqUnjoinWorkQueue 33 Exported Function
RtwqSetLongRunning 30 Exported Function
RtwqSetDeadline2 28 Exported Function
RtwqStartup 32 Exported Function
RtwqShutdown 31 Exported Function
RtwqLockSharedWorkQueue 19 Exported Function
RtwqCancelMultipleWaitingWorkItem 8 Exported Function
RtwqCancelDeadline 7 Exported Function
RtwqCreateAsyncResult 10 Exported Function
RtwqCancelWorkItem 9 Exported Function
RtwqBeginUnregisterWorkQueueWithMMCSS 6 Exported Function
RtwqAllocateSerialWorkQueue 3 Exported Function
RtwqAddPeriodicCallback 2 Exported Function
RtwqBeginRegisterWorkQueueWithMMCSS 5 Exported Function
RtwqAllocateWorkQueue 4 Exported Function
RtwqInvokeCallback 16 Exported Function
RtwqGetWorkQueueMMCSSTaskId 15 Exported Function
RtwqLockPlatform 18 Exported Function
RtwqJoinWorkQueue 17 Exported Function
RtwqGetWorkQueueMMCSSPriority 14 Exported Function
RtwqEndUnregisterWorkQueueWithMMCSS 12 Exported Function
RtwqEndRegisterWorkQueueWithMMCSS 11 Exported Function
RtwqGetWorkQueueMMCSSClass 13 Exported Function
RtwqGetPlatform 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RTWorkQ.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/eb07722ef244bb0a5c057e060dba22482c64bdbdb2008b358d04290f2a96e157/detection/

MIT License. Copyright (c) 2020-2021 Strontic.