RpcNs4.dll

  • File Path: C:\Windows\SysWOW64\RpcNs4.dll
  • Description: Remote Procedure Call Name Service Client

Hashes

Type Hash
MD5 E004C43A3B43CCCB23767C83091B9061
SHA1 67E0D059534F005377AC913C7FC86B36E513DDB4
SHA256 EE77D6D28C29407D35F7AD8771B0D60FC9E4B6BB99AF966A14553691CA74A2A3
SHA384 1B6ACA0BACD921BA03FC7FAA2EEF0BC65E986BB774210B4A166FD3DABCB9320729E7DF469888598B8958B5419085C8CC
SHA512 1305D276A0356F5794BAD3AB5F4EC0082EF81ACE99E0BDA001E936A16EEA724D2A3858A6BFC55B6011BA930612FA9A309E3C793F1342A8AA7D17EC823EB32CB8
SSDEEP 96:uSeawkpLnUE4Qgseh+GBtYo4IY+2Bn42QzaCp869ARGEGBe/6mEWhHBWwfsc:uSIkpT77fFGBGKYcEGBeSbWhHBWqr
IMP 44FCAEBA36DBF38E4B328F2F405B1287
PESHA1 AA4FCF5BDEB76D12520130AFBEB14F4E49A8085E
PE256 4DDD3B414965D399AF4A21AD7308B19C24F0802FE0CE70B85402F9C24EA80583

DLL Exports:

Function Name Ordinal Type
RpcNsMgmtBindingUnexportW 42 Exported Function
RpcNsMgmtBindingUnexportA 41 Exported Function
RpcNsGroupMbrRemoveW 40 Exported Function
RpcNsMgmtEntryCreateA 43 Exported Function
RpcNsMgmtEntryDeleteW 46 Exported Function
RpcNsMgmtEntryDeleteA 45 Exported Function
RpcNsMgmtEntryCreateW 44 Exported Function
RpcNsGroupMbrRemoveA 39 Exported Function
RpcNsGroupMbrInqBeginA 34 Exported Function
RpcNsGroupMbrAddW 33 Exported Function
RpcNsGroupMbrAddA 32 Exported Function
RpcNsGroupMbrInqBeginW 35 Exported Function
RpcNsGroupMbrInqNextW 38 Exported Function
RpcNsGroupMbrInqNextA 37 Exported Function
RpcNsGroupMbrInqDone 36 Exported Function
RpcNsMgmtEntryInqIfIdsA 47 Exported Function
RpcNsProfileEltInqDone 58 Exported Function
RpcNsProfileEltInqBeginW 57 Exported Function
RpcNsProfileEltInqBeginA 56 Exported Function
RpcNsProfileEltInqNextA 59 Exported Function
RpcNsProfileEltRemoveW 62 Exported Function
RpcNsProfileEltRemoveA 61 Exported Function
RpcNsProfileEltInqNextW 60 Exported Function
RpcNsProfileEltAddW 55 Exported Function
RpcNsMgmtInqExpAge 50 Exported Function
RpcNsMgmtHandleSetExpAge 49 Exported Function
RpcNsMgmtEntryInqIfIdsW 48 Exported Function
RpcNsMgmtSetExpAge 51 Exported Function
RpcNsProfileEltAddA 54 Exported Function
RpcNsProfileDeleteW 53 Exported Function
RpcNsProfileDeleteA 52 Exported Function
RpcNsBindingImportBeginA 11 Exported Function
RpcNsBindingExportW 10 Exported Function
RpcNsBindingExportPnPW 9 Exported Function
RpcNsBindingImportBeginW 12 Exported Function
RpcNsBindingLookupBeginA 15 Exported Function
RpcNsBindingImportNext 14 Exported Function
RpcNsBindingImportDone 13 Exported Function
RpcNsBindingExportPnPA 8 Exported Function
I_RpcNsRaiseException 3 Exported Function
I_RpcNsNegotiateTransferSyntax 2 Exported Function
I_RpcNsGetBuffer 1 Exported Function
I_RpcNsSendReceive 4 Exported Function
RpcNsBindingExportA 7 Exported Function
RpcIfIdVectorFree 6 Exported Function
I_RpcReBindBuffer 5 Exported Function
RpcNsBindingLookupBeginW 16 Exported Function
RpcNsEntryObjectInqBeginW 27 Exported Function
RpcNsEntryObjectInqBeginA 26 Exported Function
RpcNsEntryExpandNameW 25 Exported Function
RpcNsEntryObjectInqDone 28 Exported Function
RpcNsGroupDeleteW 31 Exported Function
RpcNsGroupDeleteA 30 Exported Function
RpcNsEntryObjectInqNext 29 Exported Function
RpcNsEntryExpandNameA 24 Exported Function
RpcNsBindingSelect 19 Exported Function
RpcNsBindingLookupNext 18 Exported Function
RpcNsBindingLookupDone 17 Exported Function
RpcNsBindingUnexportA 20 Exported Function
RpcNsBindingUnexportW 23 Exported Function
RpcNsBindingUnexportPnPW 22 Exported Function
RpcNsBindingUnexportPnPA 21 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rpcns4.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/ee77d6d28c29407d35f7ad8771b0d60fc9e4b6bb99af966a14553691ca74a2a3/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\RpcNs4.dll 44

MIT License. Copyright (c) 2020-2021 Strontic.