winrscmd.dll

  • File Path: C:\Windows\SysWOW64\winrscmd.dll
  • Description: remtsvc

Hashes

Type Hash
MD5 A92C46A1A9B2D9B0BF6ADC78616DE535
SHA1 01883D723B56C22A0B60A926010409D9B7B7C33E
SHA256 7D0CF5890CE20CAF62265F7C793F8277E680CBC85F5358304AE8E35231FA9F3B
SHA384 43DE6E416F6C5B119E9944F6766A0492AC41246F90A9BBE48474529B16278AE4D1837A8D20AE20A7E15715F57242C75E
SHA512 6E825E9DAA40143E9ABA43F20A1B3232AFEE624E35D08076819BD3BCD8E1845A5AB50100AD03B66C4EF3949A2E9EC75F226A61059AEF13EC4034C911BE767BB4
SSDEEP 1536:T4z+GEIN8LUPtF7ggHbShBwg4Ikt7ja+Htnv7leMZH5Efz:6+GEnLUDLmBwiUjFHtnv7leMBWfz
IMP 2DA1A7A0A71B3187169800C9D474F56F
PESHA1 E66FB101A1770CBF492640DCF7A5278197D29808
PE256 5040CF12C72AC547E749B5581E4129AE25FFBDE1D49B634DF052DCE2430311B0

DLL Exports:

Function Name Ordinal Type
Locale::Key 21 Exported Function
Locale::Key 10 Exported Function
WSManPluginCommand 23 Exported Function
Locale::Key 20 Exported Function
Locale::Key 14 Exported Function
Locale::Key 18 Exported Function
Locale::Key 9 Exported Function
WSManPluginReceive 24 Exported Function
WSManPluginShutdown 29 Exported Function
WSManPluginSignal 30 Exported Function
WSManPluginStartup 31 Exported Function
WSManPluginShell 28 Exported Function
WSManPluginReleaseCommandContext 25 Exported Function
WSManPluginReleaseShellContext 26 Exported Function
WSManPluginSend 27 Exported Function
CWSManCriticalSection::GetInitError 15 Exported Function
Locale::Key 1 Exported Function
Locale::Key 4 Exported Function
Locale::Key 2 Exported Function
public: __thiscall CWSManCriticalSectionWithConditionVar::~CWSManCriticalSectionWithConditionVar(void) 7 Exported Function
Locale::Key 8 Exported Function
Locale::Key 13 Exported Function
Locale::Key 22 Exported Function
Locale::Key 5 Exported Function
Locale::Key 12 Exported Function
Locale::Key 16 Exported Function
Locale::Key 17 Exported Function
Locale::Key 11 Exported Function
Locale::Key 3 Exported Function
Locale::Key 6 Exported Function
Locale::Key 19 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: remtsvc.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/7d0cf5890ce20caf62265f7c793f8277e680cbc85f5358304ae8e35231fa9f3b/detection/

MIT License. Copyright (c) 2020-2021 Strontic.