drt.dll

  • File Path: C:\Windows\system32\drt.dll
  • Description: Distributed Routing Table

Hashes

Type Hash
MD5 6920E5500CDAF3E5D71C007E22F7D255
SHA1 35486CF628ABE3101D1A6632E849678F20A63ED6
SHA256 F20A8BE0B8337211F88C8A62C73D3400594AA5C182E8865086B1DD5DF45905B6
SHA384 FD5AF9339F325EB7D48BE59C1DA4D20061493D3343E299AE8D1E37EF934A95994264F63FC83B1785ECF5B5051E94CAD5
SHA512 A7D052D68D3D2B4F3FD2A31F22FBDE72C7B37B6C97B84ECB59C66928E8759F11C945E7DD1E208103BA860A4F7216C566F8B12E6D5A2E49FB10749BB00C75C347
SSDEEP 6144:M/Jwd8ZzRthU3uKvmZJ7mUe6dXCc1njSgelOTfiT+HTMpTTWxsr/FwAgr8rKe4q4:ieeC3tYJ7mUe6r1njSgCODiT+HTMD6xN
IMP 01E102BA1CCFEFA4BC3A7BC1DFF30B38
PESHA1 3FC4BA507E22F35379B52B0298C7992815527468
PE256 06ACFA6A9AD680AFA88240FF73A93F743C05DF2639FCD54E1785EFEA3F32E7E9

DLL Exports:

Function Name Ordinal Type
DrtOpen 17 Exported Function
DrtPingPeer 4 Exported Function
DrtHandlePowerEvent 3 Exported Function
DrtGetSearchResult 15 Exported Function
DrtGetSearchResultSize 16 Exported Function
DrtUnregisterKey 20 Exported Function
DrtUpdateKey 21 Exported Function
DrtStartSearch 19 Exported Function
DrtRegisterKey 18 Exported Function
DrtStartPartitionDetection 5 Exported Function
DrtGetSearchPathSize 14 Exported Function
DrtFlushCache 1 Exported Function
DrtGetCacheStatsEx 2 Exported Function
DrtEndSearch 8 Exported Function
DrtClose 6 Exported Function
DrtContinueSearch 7 Exported Function
DrtGetInstanceNameSize 12 Exported Function
DrtGetSearchPath 13 Exported Function
DrtGetInstanceName 11 Exported Function
DrtGetEventData 9 Exported Function
DrtGetEventDataSize 10 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: drt.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/f20a8be0b8337211f88c8a62c73d3400594aa5c182e8865086b1dd5df45905b6/detection/

MIT License. Copyright (c) 2020-2021 Strontic.