winrscmd.dll

  • File Path: C:\Windows\system32\winrscmd.dll
  • Description: remtsvc

Hashes

Type Hash
MD5 5DBDC85EC941A4474B16D3B14837BD91
SHA1 49906E2CF2FC60D2CAAAE62D292D8223B09404E2
SHA256 20020CE9ABCA67596346F83E3717CD65F54254BFDFE5B065CCD0169B486477AF
SHA384 B81A6802706F6B0BE6A67A4330FAD0CF2E8AAFEDDDF3BBE122D46040238B443DE64B8F3F5B0A2EFA87999E116D1F3F8F
SHA512 3A7CD59D34FEFB137A67EE6A8DE091F43B7F986F0BCEC2C34AB639858EEB91ED56F20CE8340DA085F6D4F3EA577FC4A220B16B9BD4465CDF22DA354ACD105C54
SSDEEP 3072:BSqtIsn+OVwIG2Ysit/yFYOXgy+Or3RKnUanvJo20LSwv:cdxOV8sM/yFYOXTVanvJo2y
IMP 8571DD2853AF887B0E1763EA7952B351
PESHA1 35AACD0EDD82EA034567C38E56809116708E579B
PE256 B943F97FB61688F64F9C6F2047C5B18DF5EEC43695C383785FF9450C14180DC0

DLL Exports:

Function Name Ordinal Type
Locale::Key 21 Exported Function
Locale::Key 10 Exported Function
WSManPluginCommand 23 Exported Function
Locale::Key 20 Exported Function
Locale::Key 14 Exported Function
Locale::Key 18 Exported Function
Locale::Key 9 Exported Function
WSManPluginReceive 24 Exported Function
WSManPluginShutdown 29 Exported Function
WSManPluginSignal 30 Exported Function
WSManPluginStartup 31 Exported Function
WSManPluginShell 28 Exported Function
WSManPluginReleaseCommandContext 25 Exported Function
WSManPluginReleaseShellContext 26 Exported Function
WSManPluginSend 27 Exported Function
CWSManCriticalSection::GetInitError 15 Exported Function
Locale::Key 1 Exported Function
Locale::Key 4 Exported Function
Locale::Key 2 Exported Function
public: __cdecl CWSManCriticalSectionWithConditionVar::~CWSManCriticalSectionWithConditionVar(void) __ptr64 7 Exported Function
Locale::Key 8 Exported Function
Locale::Key 13 Exported Function
Locale::Key 22 Exported Function
Locale::Key 5 Exported Function
Locale::Key 12 Exported Function
Locale::Key 16 Exported Function
Locale::Key 17 Exported Function
Locale::Key 11 Exported Function
Locale::Key 3 Exported Function
Locale::Key 6 Exported Function
Locale::Key 19 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: remtsvc.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/20020ce9abca67596346f83e3717cd65f54254bfdfe5b065ccd0169b486477af/detection/

MIT License. Copyright (c) 2020-2021 Strontic.