rpcnsh.dll

  • File Path: C:\Windows\SysWOW64\rpcnsh.dll
  • Description: RPC Netshell Helper

Hashes

Type Hash
MD5 2BE1984E696CC8DA34C747E69C41176F
SHA1 B17820B0DA90A188BF069B928F1BFEC0B125A805
SHA256 9FDDCDF7F28F80F973A339A1FFE7FC128D553153B8E0E8AD048A8536C027E9BC
SHA384 6EAA488939E8D435A1407E0C67D6B24AE87323CC3C05C1E59FBF19009746DD0484E2C7B423D1B2D190D38894036AA782
SHA512 7F3A3837F64C8B9EBD4F3F340FA4B1C9033A81511445DFF7C8A929E87096B1CFE63334953F4918A2EB50702EEDEB20FA0A1095028B3F5E80D95EA791EF629EE0
SSDEEP 384:jCq6BhXf5ua+iVfzkuXEt0Gl0pRckyeBohbLhBn9oPK0FNzb3IL9UpSi54A1WZtQ:OBJltVf+wpRNye4ByI9B5w
IMP 5A648622EF8040358066C1383CDBD8A4
PESHA1 EC9FD034716C0A56F317464197D48F49B79D610C
PE256 6494A29E8EA4037313C147FA6BD893F63D1B18AB1C2BDACC945223903B757FDC

DLL Exports:

Function Name Ordinal Type
InitHelperDll 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rpcnsh.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/9fddcdf7f28f80f973a339a1ffe7fc128d553153b8e0e8ad048a8536c027e9bc/detection/

MIT License. Copyright (c) 2020-2021 Strontic.