RemoteAppLifetimeManagerProxyStub.dll

  • File Path: C:\Windows\system32\RemoteAppLifetimeManagerProxyStub.dll
  • Description: RALM

Hashes

Type Hash
MD5 BBDD0CFA22609724363FF4437BB47959
SHA1 68ECB50C8CAA2A7205CCD50B194A43664BFDE5EF
SHA256 B1F134A7183435671AF8C9C1592D9662C1B4E1788577EB5BFFA5B9E8CAAE148D
SHA384 7A1361D3A664C279B0D6541E2BC2C1C8422FCC00D0534C8F52D749091526C9B57C86B63F7FDECA4646F50041548520A1
SHA512 0F0EC4D3EDE6A4830986762F19DCC826FEC8B04BB400CC2732EFF731F970DE20EEB36DDE4F72471CEA20E7451F7C35B26341599602471460CF443FD5351A6A3E
SSDEEP 192:Sd28AFN/tSNSbt9ieWkqinCH34MijZrtXEnVFfWHgW:Sd2r/niejvXjZrtUVxWHgW
IMP DBDBC2DF4456F1F0F01B44EA7E3570BB
PESHA1 BE25233E7557F900291CAFD515A07EEED0A921AA
PE256 3C26CABE1DAF304B45CA142567FC6557333D9CCCCF437C3B207B11D6FCB455C2

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RemoteAppLifetimeManagerProxyStub.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/b1f134a7183435671af8c9c1592d9662c1b4e1788577eb5bffa5b9e8caae148d/detection/

MIT License. Copyright (c) 2020 Strontic.