TSWorkspace.dll

  • File Path: C:\Windows\system32\TSWorkspace.dll
  • Description: RemoteApp and Desktop Connection Component

Hashes

Type Hash
MD5 FD0F79622B204C2F452FD533C3A7EE3E
SHA1 967648A988F4415EA8B937F99FC9842A4D14E5C5
SHA256 22039BAA1D8218C7650F72B2DDD2DC014BE243DB56C123867F5345E68A12081A
SHA384 CDFC85A8593C5E907760B981B4F8895B4A675048DC390F614BA69A073BEF339131BA45061D7D94A2ABA9CDE131D745D1
SHA512 971D6BF1D956AB4305D98F9BB194D9E94F846A2E80CF2F0C42D039700982E86CD46A1ABDB2F8EF28E3A127579B6B2C88D6755712662CB293B8D6EC7070468742
SSDEEP 24576:dkQ+kFocGHh8XNy2+2C3bj3PuspP7Nl/3ZDLkcQuENs0phL22XruuCv2NBKeMim:dkQ+kFocGB8Xn+2C3nGslNl/ZDQruENk
IMP 7CFD2FD720200209337CF574DE7F6FDF
PESHA1 D1743DDB4615BFCFF63BAC019D47494E845D67BD
PE256 ED2D20B7384079023E2265C7C497EE19F0CC9EDA1D59D3ABDA87D6406CC60566

DLL Exports:

Function Name Ordinal Type
TaskUpdateWorkspacesIfNeeded 8 Exported Function
TaskUpdateWorkspaces2 6 Exported Function
TaskUpdateWorkspaces 7 Exported Function
TryParseClaimsAuthnHeader 4 Exported Function
WorkspaceStatusNotify2 10 Exported Function
WorkspaceStatusNotify 11 Exported Function
WorkspaceSilentSetupW 9 Exported Function
RADCUISupportCreateSubscriptionClient 1 Exported Function
DllGetClassObject 13 Exported Function
DllCanUnloadNow 12 Exported Function
CreateClaimsAuthResponseHeader 3 Exported Function
DllRegisterServer 14 Exported Function
RADCUISupportCreateDiscoveryStrategy 2 Exported Function
RADCProcessGroupPolicyEx 5 Exported Function
DllUnregisterServer 15 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TSWORKSPACE.DLL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/22039baa1d8218c7650f72b2ddd2dc014be243db56c123867f5345e68a12081a/detection/

MIT License. Copyright (c) 2020 Strontic.