rpcnsh.dll

  • File Path: C:\Windows\system32\rpcnsh.dll
  • Description: RPC Netshell Helper

Hashes

Type Hash
MD5 C5ADBE46703A1DB31A0C6AB7245F2DA6
SHA1 4CC8C03ED4B9FFC2566815954771F782B922B651
SHA256 BFF0B93F9071A867D514D6DE196E1368F655BCF54D4FC1623EE043CDB1CDBD77
SHA384 D84E66B38A4503F4F62E352D535D08AC3E5FBCFA7C72A719019E21A5E97E2A5295C8EC882E8D4AC843256AC28351D94F
SHA512 D73821A2DCA2C2F3DBEF5939053D00CD89F34B437E82F0077395C8B22AC297980514241C1B5C321C2765C0AAA5C12BD0EC6460A55BC6426D2064B6F147AEA085
SSDEEP 384:gJDA9T8UqV2bojUJvlPmMka1+02C6BkZNAM9xUFt2QiVbzBxBH/5eauCVvT0n1rg:L8U9FwE1+00BuPA45t1xZl9VvghJa
IMP 00CE5D3D7014818CC40866BDFD22BE77
PESHA1 2289664EFCFA2A5DCAE9B54075BE54613365F13B
PE256 D941B703CCB608B7F4F781C126310D46559DE0EDA5EDC05EC048A77643A9A8F2

DLL Exports:

Function Name Ordinal Type
InitHelperDll 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rpcnsh.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/bff0b93f9071a867d514d6de196e1368f655bcf54d4fc1623ee043cdb1cdbd77/detection/

MIT License. Copyright (c) 2020-2021 Strontic.