umrdp.dll

  • File Path: C:\Windows\system32\umrdp.dll
  • Description: Remote Desktop Services Device Redirector Service

Hashes

Type Hash
MD5 28A7C9E5B95D10B6FFD7E4046B6F4943
SHA1 05B6B71460F19FC72B8DFCEEAC0DBDD9B99429D3
SHA256 68E84068FC5A895D144C1B470AA0769E52045992DAA6FE95BE6C32FDEB054A84
SHA384 C0EA0AC8667A5CAB35582D97EA83650283F52BA9D362CBFAB628EBC3CDFB277FFD97831408B49BF9C556CBB1116B65E4
SHA512 1B9440E2EDCAC10C6486CC2BC13F37A5130CD8BB03BC1A86A105F13ED9D3C8E8DA16ADF4CAFF364741DA6772B17937B1B828E6B7B81F58422308B3736B0784B4
SSDEEP 12288:0USc9r5Da8lnTmOfGXNFbM4Yu5DR2MpV:0USc9F5ny2GXVDR2Mp
IMP BFF07CAF688B91E60CDAAE6DF2EB7470
PESHA1 E628BCCA78C5DE9389B6915CAC3E9EB461B3468D
PE256 865C681A03413D77ED8ABC65C7E6A28CD5EB80BE5AD80131196CF3BF4F96D188

DLL Exports:

Function Name Ordinal Type
SvchostPushServiceGlobals 2 Exported Function
ServiceMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: umrdp.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/68e84068fc5a895d144c1b470aa0769e52045992daa6fe95be6c32fdeb054a84/detection/

MIT License. Copyright (c) 2020-2021 Strontic.