RdpSaPs.dll
  - File Path: 
C:\Windows\system32\RdpSaPs.dll 
  - Description: RDP Session Agent Proxy Stub
 
Hashes
  
    
      | Type | 
      Hash | 
    
  
  
    
      | MD5 | 
      23C4C2376B0D6BA361800ADBB0666FDC | 
    
    
      | SHA1 | 
      92F457B2D143B7C16ACBD9DB65D885EF7133844F | 
    
    
      | SHA256 | 
      C844340746818711894B607A8E3ADF9C031DC4C2306C1EDF1EBB0DF8DE5E1EFC | 
    
    
      | SHA384 | 
      2E8BB05A9E3691FDC240CBDAA8EA44C243983B18196105221F74ABC4072689FFF761437B21977A84D925EC9ED9DDA00D | 
    
    
      | SHA512 | 
      BB3B683D70B62BB6BF6074521833F4B27755C63CAAADE635D1B2F9C4E670BCF5BA926563DDF9F711430991C868E7007AC69A10456D5A54A3623F3109E146512E | 
    
    
      | SSDEEP | 
      384:pGMbX2C3R5IWHezAol9gU4tn9rG0W4WWr:4k57K2T | 
    
    
      | IMP | 
      627B3DAD5F74C3D207A3F627FBA0CE20 | 
    
    
      | PESHA1 | 
      7C6CD3EDB0CD724F512C1014BEE7AF7C6C87757D | 
    
    
      | PE256 | 
      028D3426F01D75E892ED78E8DDF03C0940F046231AB28978F62896DA7ED13123 | 
    
  
DLL Exports:
  
    
      | Function Name | 
      Ordinal | 
      Type | 
    
  
  
    
      DllUnregisterServer | 
      4 | 
      Exported Function | 
    
    
      GetProxyDllInfo | 
      5 | 
      Exported Function | 
    
    
      DllRegisterServer | 
      3 | 
      Exported Function | 
    
    
      DllCanUnloadNow | 
      1 | 
      Exported Function | 
    
    
      DllGetClassObject | 
      2 | 
      Exported Function | 
    
  
Signature
  - Status: Signature verified.
 
  - Serial: 
3300000266BD1580EFA75CD6D3000000000266 
  - Thumbprint: 
A4341B9FD50FB9964283220A36A1EF6F6FAA7840 
  - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
 
  - Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
 
  - Original Filename: RdpSaPs.dll
 
  - Product Name: Microsoft Windows Operating System
 
  - Company Name: Microsoft Corporation
 
  - File Version: 10.0.19041.1 (WinBuild.160101.0800)
 
  - Product Version: 10.0.19041.1
 
  - Language: English (United States)
 
  - Legal Copyright:  Microsoft Corporation. All rights reserved.
 
  - Machine Type: 64-bit
 
File Scan
  - VirusTotal Detections: 0/72
 
  - VirusTotal Link: https://www.virustotal.com/gui/file/c844340746818711894b607a8e3adf9c031dc4c2306c1edf1ebb0df8de5e1efc/detection/
 
MIT License. Copyright (c) 2020-2021 Strontic.