rpcexts.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\rpcexts.dll
  • Description: Symbolic Debugger Extensions

Hashes

Type Hash
MD5 30C08324CF4A52C094702ADB9D6F851E
SHA1 931DE37930C1D994CA8E63CB7643919DBCB52313
SHA256 773F9828DE5E5489F265A47F19932A3518C28DB5A938C7D8F14FB3E4F2F17A00
SHA384 12A08D3333B8E32530D669342C3709328B62BD1726713A7A7038F1140F7CF8BAEBCFBB6E86DD2DA42EA30A73BCDE9048
SHA512 BD0322D302BC672AE37B1ADF51E18FF94D69F0FABA26D9622C0B90C901845D85F5D353553D7FD3CCCFC64462937100F4CB0870505A90DD053E5846723BA264BB
SSDEEP 3072:qBxzdILCsTtivWr5W7qLj5T2u9lKVl5yr79IFX2C83IuV2PMwfe7li0g3Z4lQDoa:QF2CwJY7qX4qn9qX2C83IuDQD
IMP 7A894AEE9FD48F84888CA573DFF86637
PESHA1 B6F5D9CD7FCBC3E57F5026BADFAA42D02F4B2338
PE256 4E51AD995F3AFD06CD7A0DFD98C30D52A09989509B998A1A7F48AAC2E888310D

DLL Exports:

Function Name Ordinal Type
protocols 39 Exported Function
pipestate 38 Exported Function
pipemsg 37 Exported Function
queue 40 Exported Function
rpcreadstack 43 Exported Function
rpcmsg 42 Exported Function
rpcheap 41 Exported Function
mode 32 Exported Function
lpcscall 31 Exported Function
lpcsa 30 Exported Function
obj 33 Exported Function
pipedesc 36 Exported Function
pasync 35 Exported Function
overlap 34 Exported Function
rpcsvr 44 Exported Function
traceasynccall 54 Exported Function
thread 53 Exported Function
stubmsg 52 Exported Function
tracesynccall 55 Exported Function
version 58 Exported Function
transinfo 57 Exported Function
trans 56 Exported Function
rpcverifier 47 Exported Function
rpcverbosestack 46 Exported Function
rpctime 45 Exported Function
scan 48 Exported Function
stackmatch 51 Exported Function
sizes 50 Exported Function
secinfo 49 Exported Function
dict 11 Exported Function
DebugExtensionUninitialize 3 Exported Function
DebugExtensionNotify 2 Exported Function
dict2 12 Exported Function
error 15 Exported Function
eerecord 14 Exported Function
eeinfo 13 Exported Function
asyncmsg 7 Exported Function
ama 6 Exported Function
addrvect 5 Exported Function
asyncrpc 8 Exported Function
DebugExtensionInitialize 1 Exported Function
copacket 10 Exported Function
authinfo 9 Exported Function
fwscan 16 Exported Function
listcalls 25 Exported Function
KnownStructOutputEx 4 Exported Function
if 24 Exported Function
lpcaddr 26 Exported Function
lpcccall 29 Exported Function
lpcca 28 Exported Function
lpcbh 27 Exported Function
getdbgcell 19 Exported Function
getclientcallinfo 18 Exported Function
getcallinfo 17 Exported Function
getendpointinfo 20 Exported Function
help 23 Exported Function
getvalidateerror 22 Exported Function
getthreadinfo 21 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ntsdexts
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/773f9828de5e5489f265a47f19932a3518c28db5a938c7d8f14fb3e4f2f17a00/detection

MIT License. Copyright (c) 2020-2021 Strontic.