drt.dll

  • File Path: C:\Windows\SysWOW64\drt.dll
  • Description: Distributed Routing Table

Hashes

Type Hash
MD5 6A722B9D426177B7ED700AECB21B820F
SHA1 BD295D846F434BA4A192E329DED554A84F0AC8CE
SHA256 C0D238E38646AF5E6FB542C1F04014C6013C9E27085CD1F6D5E6BFD2CC77400C
SHA384 138613C94E0094A8E1E77F21881FE530B9FC957D3E24BB9F3EF580BF5DB4908CA5D596C4AEC988D47DA733DF820C18D9
SHA512 BB4CECBA20ED3CB6640DE8EC63EAB5696A913C7B7875A8762FED220EF2BEF8EE0588740A6EEDFC9B4F2977D107046BC3FEFA2F854DC7C72AECF40EF62CFE921C
SSDEEP 3072:ncLl3h9mGGMdA4v7DpVe9PQOUHLy9ZA+WV8QjltX88FVF+ow:ncB3VGMdA4TNsd7UHLy9ZA+u8UltDP7
IMP 9274CC4DC8BF203601BF331C946904B3
PESHA1 F07328F4A19837690BE47E66B58FF3C38CA8635E
PE256 A30B4A0EFAF0833BDD27834767444042DD6502CD43EE9B811719185F812BD35A

DLL Exports:

Function Name Ordinal Type
DrtOpen 17 Exported Function
DrtPingPeer 4 Exported Function
DrtHandlePowerEvent 3 Exported Function
DrtGetSearchResult 15 Exported Function
DrtGetSearchResultSize 16 Exported Function
DrtUnregisterKey 20 Exported Function
DrtUpdateKey 21 Exported Function
DrtStartSearch 19 Exported Function
DrtRegisterKey 18 Exported Function
DrtStartPartitionDetection 5 Exported Function
DrtGetSearchPathSize 14 Exported Function
DrtFlushCache 1 Exported Function
DrtGetCacheStatsEx 2 Exported Function
DrtEndSearch 8 Exported Function
DrtClose 6 Exported Function
DrtContinueSearch 7 Exported Function
DrtGetInstanceNameSize 12 Exported Function
DrtGetSearchPath 13 Exported Function
DrtGetInstanceName 11 Exported Function
DrtGetEventData 9 Exported Function
DrtGetEventDataSize 10 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: drt.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/c0d238e38646af5e6fb542c1f04014c6013c9e27085cd1f6d5e6bfd2cc77400c/detection/

MIT License. Copyright (c) 2020-2021 Strontic.