RTWorkQ.dll

  • File Path: C:\Windows\system32\RTWorkQ.dll
  • Description: Realtime WorkQueue DLL

Hashes

Type Hash
MD5 FF7661710BF691FBFF2D10FA8A79E5B1
SHA1 B4239041C037E93728DEE3F54187EBD28DCC6637
SHA256 9A64F0D2AD904A67DEAAF35DB50CE5A2E31ADCDB0D153B81F8F042C1F3AF35F3
SHA384 1281FE78F80C8F498096BF5BF15CF3648B93C516A07A2644AD7BF59BF4EC85B8F805543E8D426E4CDC8ABFABD58D6EAC
SHA512 AF31955C2C7575BD6B60A5825BC9BE10EFBF9B652C52FD825A951855399C64BE03ECF9C474E32EDB7B9428604F81EF331A3614D776F16D5D324BE6F689A03E8A
SSDEEP 3072:Gi/XuUBXru0ILbIyXxXHrEys2LAZs8i8hLuDMKraUBR2q5a:1/XuUpu7AyXxy2L2DcMjU+qk
IMP 6905CB3319FA91E98133205A243B7F44
PESHA1 B00E47C20C3656203ABD9ABABE9F87FA52468788
PE256 3B4627256BBA625D69E0C32DD26DF61CB20EA7BC37F0DF0493EAF166D37FA6B2

DLL Exports:

Function Name Ordinal Type
RtwqRemovePeriodicCallback 26 Exported Function
RtwqRegisterPlatformWithMMCSS 25 Exported Function
RtwqSetDeadline 28 Exported Function
RtwqScheduleWorkItem 27 Exported Function
RtwqRegisterPlatformEvents 24 Exported Function
RtwqPutMultipleWaitingWorkItem 21 Exported Function
RtwqLockWorkQueue 20 Exported Function
RtwqPutWorkItem 23 Exported Function
RtwqPutWaitingWorkItem 22 Exported Function
RtwqUnlockWorkQueue 35 Exported Function
RtwqUnlockPlatform 34 Exported Function
RtwqUnregisterPlatformFromMMCSS 37 Exported Function
RtwqUnregisterPlatformEvents 36 Exported Function
RtwqUnjoinWorkQueue 33 Exported Function
RtwqSetLongRunning 30 Exported Function
RtwqSetDeadline2 29 Exported Function
RtwqStartup 32 Exported Function
RtwqShutdown 31 Exported Function
RtwqLockSharedWorkQueue 19 Exported Function
RtwqCancelMultipleWaitingWorkItem 8 Exported Function
RtwqCancelDeadline 7 Exported Function
RtwqCreateAsyncResult 10 Exported Function
RtwqCancelWorkItem 9 Exported Function
RtwqBeginUnregisterWorkQueueWithMMCSS 6 Exported Function
RtwqAllocateSerialWorkQueue 3 Exported Function
RtwqAddPeriodicCallback 2 Exported Function
RtwqBeginRegisterWorkQueueWithMMCSS 5 Exported Function
RtwqAllocateWorkQueue 4 Exported Function
RtwqInvokeCallback 16 Exported Function
RtwqGetWorkQueueMMCSSTaskId 15 Exported Function
RtwqLockPlatform 18 Exported Function
RtwqJoinWorkQueue 17 Exported Function
RtwqGetWorkQueueMMCSSPriority 14 Exported Function
RtwqEndUnregisterWorkQueueWithMMCSS 12 Exported Function
RtwqEndRegisterWorkQueueWithMMCSS 11 Exported Function
RtwqGetWorkQueueMMCSSClass 13 Exported Function
RtwqGetPlatform 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RTWorkQ.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/9a64f0d2ad904a67deaaf35db50ce5a2e31adcdb0d153b81f8f042c1f3af35f3/detection/

MIT License. Copyright (c) 2020-2021 Strontic.