rdpcorets.dll

  • File Path: C:\Windows\system32\rdpcorets.dll
  • Description: TS RDPCore DLL

Hashes

Type Hash
MD5 63E16951FAA45E3F630EB6D08A341E07
SHA1 669837A9114477A71D5B3BEEF3BFE778B925A3F3
SHA256 802AD4625773EC09D678C85F8A7A0FC93D9D3576CC43B1DC304E7ADC0B8C4663
SHA384 BBDE8070969C104CE5BF0AD8315731C0500F0037422A35FBAFA73CAA3B8CF0DA714EA53193CB0EB3AFD63126DA9BBB3A
SHA512 DE14D48DC3B187388B41AD21714691DFA934F14110491A9ECE8B06E0FA2709F8641870DFDFFC19D5F990825F6970C7AC307868774BE6ED3CD2A4E939FB678FDB
SSDEEP 49152:ndGaw7mo29e+E1PhAjB679f6bi00LY2Fu1c1QrrvNNMJjnMBsNYuPUN/HcQJmbny:ndNomo24+E1PU6RYRNvNNMJDWsNYuPUl
IMP 415AC85EDB46F0AB8AC89A27E11EDB69
PESHA1 E0097F9DDC0DE45C62D44CA90FF351A0D95E138B
PE256 9422F30470E98BD6A2511C1FE3898107DF4A0822FF65F746AD5E8A92A2CCBFCA

DLL Exports:

Function Name Ordinal Type
DllUnregisterServer 4 Exported Function
RFX_CreateGFXService 5 Exported Function
RFX_CreatePluginFactory 6 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function
DllRegisterServer 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RdpCoreTS.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/802ad4625773ec09d678c85f8a7a0fc93d9d3576cc43b1dc304e7adc0b8c4663/detection/

MIT License. Copyright (c) 2020-2021 Strontic.