SessEnv.dll

  • File Path: C:\Windows\SysWOW64\SessEnv.dll
  • Description: Remote Desktop Configuration service

Hashes

Type Hash
MD5 6DF56A8D39F0F410A2F9F888E6F623FE
SHA1 8D79AB93123E6D758FFC93691A1B6BC1068FB7BD
SHA256 0CDFC70B784E102A357303BA83EF11F33E5699CA7263DE161EA79D5AFE917982
SHA384 30EE82BE917A3A2ED99E36E6AFE4DCACC05E2F7F4CC5A284B491A961B6803DE2B3368A472C87CD604465369D3A564C1C
SHA512 D2A1802E950125BD358633468B026701E4D4D023DDAD97BA64048B5A9D709C634B66DCA32BC9817D5BD8EAAA6066E5C8FD329D232ED42927EC8BB60EAA7A68E2
SSDEEP 12288:Cf9w7HCGvorXuciL59jEdjfKEdJRfh0UD0:69w+GArXuciL59jQ2sRfh0UD
IMP 02E57FDA0A991A3D9E772B7BBEDD0F72
PESHA1 F756C76517906AFAD394D40961D377A75650FCE4
PE256 7B2D2BAC55C23FDF8AAD346C47C6D4E47990D9FB9D8C3DC181ADA8CF032D84BC

DLL Exports:

Function Name Ordinal Type
SvchostPushServiceGlobals 2 Exported Function
ServiceMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SessEnv.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/0cdfc70b784e102a357303ba83ef11f33e5699ca7263de161ea79d5afe917982/detection/

MIT License. Copyright (c) 2020 Strontic.