RpcNs4.dll

  • File Path: C:\Windows\system32\RpcNs4.dll
  • Description: Remote Procedure Call Name Service Client

Hashes

Type Hash
MD5 FE96BD9F00DD06C0CF7C01034D50A9AE
SHA1 873E56FBA4222860000C54DA9C06A553F88A605A
SHA256 ADA416D1E94295A64F60C9C51A6BD282E7183C93E069FC2121CDBD541BA1DCFB
SHA384 62B7AD5CD2538493D4FF7AC1F851424F2FB7D48DC584DB0B9C8BF957C4658E806C652D2939A9F0FA5B08ACEA0DB0B7D5
SHA512 CF201644214AA343B688C63EC731C5A939096F291ACBECF78F55CBA67D62D0FE49F85AC9157F75F6DFD106A050E48DFFB79472E8D739A53CBC182459671956A7
SSDEEP 96:kPF4gDqI76oc6bawkLBbCnJBn42QzaCp869n3+V5yYTL7NymEWhHBWw:kd4gDqI7Rp7kv3+LyYTLYbWhHBW
IMP E06944C518403F775C9C3D3B5156CA77
PESHA1 02862D64FE5C8FBCCCC6EC1AA6C150B90C9065A6
PE256 2040BE0E246DA700F65062C405B3151237F1D7E438FF88B09CBC5CA4520A5045

DLL Exports:

Function Name Ordinal Type
RpcNsMgmtBindingUnexportW 42 Exported Function
RpcNsMgmtBindingUnexportA 41 Exported Function
RpcNsGroupMbrRemoveW 40 Exported Function
RpcNsMgmtEntryCreateA 43 Exported Function
RpcNsMgmtEntryDeleteW 46 Exported Function
RpcNsMgmtEntryDeleteA 45 Exported Function
RpcNsMgmtEntryCreateW 44 Exported Function
RpcNsGroupMbrRemoveA 39 Exported Function
RpcNsGroupMbrInqBeginA 34 Exported Function
RpcNsGroupMbrAddW 33 Exported Function
RpcNsGroupMbrAddA 32 Exported Function
RpcNsGroupMbrInqBeginW 35 Exported Function
RpcNsGroupMbrInqNextW 38 Exported Function
RpcNsGroupMbrInqNextA 37 Exported Function
RpcNsGroupMbrInqDone 36 Exported Function
RpcNsMgmtEntryInqIfIdsA 47 Exported Function
RpcNsProfileEltInqDone 58 Exported Function
RpcNsProfileEltInqBeginW 57 Exported Function
RpcNsProfileEltInqBeginA 56 Exported Function
RpcNsProfileEltInqNextA 59 Exported Function
RpcNsProfileEltRemoveW 62 Exported Function
RpcNsProfileEltRemoveA 61 Exported Function
RpcNsProfileEltInqNextW 60 Exported Function
RpcNsProfileEltAddW 55 Exported Function
RpcNsMgmtInqExpAge 50 Exported Function
RpcNsMgmtHandleSetExpAge 49 Exported Function
RpcNsMgmtEntryInqIfIdsW 48 Exported Function
RpcNsMgmtSetExpAge 51 Exported Function
RpcNsProfileEltAddA 54 Exported Function
RpcNsProfileDeleteW 53 Exported Function
RpcNsProfileDeleteA 52 Exported Function
RpcNsBindingImportBeginA 11 Exported Function
RpcNsBindingExportW 10 Exported Function
RpcNsBindingExportPnPW 9 Exported Function
RpcNsBindingImportBeginW 12 Exported Function
RpcNsBindingLookupBeginA 15 Exported Function
RpcNsBindingImportNext 14 Exported Function
RpcNsBindingImportDone 13 Exported Function
RpcNsBindingExportPnPA 8 Exported Function
I_RpcNsRaiseException 3 Exported Function
I_RpcNsNegotiateTransferSyntax 2 Exported Function
I_RpcNsGetBuffer 1 Exported Function
I_RpcNsSendReceive 4 Exported Function
RpcNsBindingExportA 7 Exported Function
RpcIfIdVectorFree 6 Exported Function
I_RpcReBindBuffer 5 Exported Function
RpcNsBindingLookupBeginW 16 Exported Function
RpcNsEntryObjectInqBeginW 27 Exported Function
RpcNsEntryObjectInqBeginA 26 Exported Function
RpcNsEntryExpandNameW 25 Exported Function
RpcNsEntryObjectInqDone 28 Exported Function
RpcNsGroupDeleteW 31 Exported Function
RpcNsGroupDeleteA 30 Exported Function
RpcNsEntryObjectInqNext 29 Exported Function
RpcNsEntryExpandNameA 24 Exported Function
RpcNsBindingSelect 19 Exported Function
RpcNsBindingLookupNext 18 Exported Function
RpcNsBindingLookupDone 17 Exported Function
RpcNsBindingUnexportA 20 Exported Function
RpcNsBindingUnexportW 23 Exported Function
RpcNsBindingUnexportPnPW 22 Exported Function
RpcNsBindingUnexportPnPA 21 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rpcns4.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/ada416d1e94295a64f60c9c51a6bd282e7183c93e069fc2121cdbd541ba1dcfb/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\RpcNs4.dll 44

MIT License. Copyright (c) 2020-2021 Strontic.