rsopprov.exe

  • File Path: C:\Windows\SysWOW64\rsopprov.exe
  • Description: RSoP Service Application

Hashes

Type Hash
MD5 8C57646A515999F7396628DC04D05323
SHA1 49F76C40332706C71957D7C8AE85EE8761658CD8
SHA256 2AFC95AC674762F8533B1BE1A0035D2402BD3CDB5CCF940E0B5C45254B1E3F1C
SHA384 A061F8C037999EBD18CC5AF5B23E1A4169A112399AE7882B101FA0D9FE09B638480E025ABAA1B5975DFFA0BE55412FAF
SHA512 D416315132CBB78C5564B35ABF682431593D60CC4A7CD449FEBDC00976D40C6995368EF50ECD517986935066CC62198BA73C7327628A616FA7B93AF6EB4DDF2E
SSDEEP 1536:m+QBL9MdYWhOgecpBpgfQ7viyGPERtSw/9JRpAFE6kg2xlh8wQ13NnffdZyVl:m+uL9MdYWhOgecpoQ7vi5mHCE7x83NnY

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\rsopprov.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RSOPPROV.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\rsopprov.exe 47
C:\windows\SysWOW64\rsopprov.exe 40
C:\Windows\SysWOW64\rsopprov.exe 50

MIT License. Copyright (c) 2020-2021 Strontic.