rsopprov.exe

  • File Path: C:\Windows\system32\rsopprov.exe
  • Description: RSoP Service Application

Hashes

Type Hash
MD5 3E8360BC377BF8D2C8B7956A3262C874
SHA1 2B280CE7C050FA8B8AA875163638F4FC442210D5
SHA256 78809F6978278D5FAEBCE418DE0EBBAC381B88071DDAF75DD827FFF42312A1A1
SHA384 8356EA733B3A435591E60A22C901A21BBF0BCDE37563AC6D12EE77F97A84D1A3F015C1A2C778DCEA51305D62D7BB3FD2
SHA512 F94B7CA7FD2A3F13747C0FF49E64055FD865863A0F599085899A70A121A5BC4BFF4186F22EEE48838BF850B711725B2D599A708ED3372390193D4EA4CCA6C175
SSDEEP 1536:vg04LBAT4aUNk+L8rtaIHKWdELDUHHGFNSNq+GRb9Md42hOg+cKKtcVTYy2V:YVKV+Q6UGF7+Mb9Md42hOg+cKIc15i

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\rsopprov.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RSOPPROV.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\rsopprov.exe 49
C:\Windows\system32\rsopprov.exe 43

MIT License. Copyright (c) 2020-2021 Strontic.