winrsmgr.dll

  • File Path: C:\Windows\system32\winrsmgr.dll
  • Description: WSMan Shell API

Hashes

Type Hash
MD5 6DBEBBAF1C358FF2AA8F066DF3A60355
SHA1 95E36B6F202B9DB2465B1FB867F1891FEDF02B6B
SHA256 9BE96778B747F251BCD72478179E6AE4069F02FDF4CEA899065A00D4FDF750F1
SHA384 4C6E8877AD1FBA8342D7911110EEA840C342F3181622269D830FCA66FF0F24DF65F2466D61658839B442804AFD2B9B8C
SHA512 7650B9E40CA210A0C88E5FCC59AC28C9CD88F2DDD3311C7382428B64386ADBE5642B9F57D981AF18954837BCE669A1E9D911DC3B848DAA52A31E59802F6AB5F1
SSDEEP 24:elGSALivI/Q/DCBVjM82IZW0HGbNuZbpa135WWdPPYPNy:CAVQMjMFIZWUGhuZ9at5WwHg
IMP n/a
PESHA1 82BF801986C1D1A788C120C894487CA9F0828EAA
PE256 AD502E5D758A182A69F718C9436EE55C2196D5EF46C27ADBF072D59DA920251F

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: winrsmgr.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/9be96778b747f251bcd72478179e6ae4069f02fdf4cea899065a00d4fdf750f1/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\advapi32res.dll 54
C:\Windows\system32\asferror.dll 47
C:\Windows\system32\blbres.dll 54
C:\Windows\system32\bridgeres.dll 54
C:\Windows\system32\comres.dll 46
C:\Windows\system32\DMAppsRes.dll 50
C:\Windows\system32\dmdskres.dll 55
C:\Windows\system32\dmdskres2.dll 55
C:\Windows\system32\ETWCoreUIComponentsResources.dll 46
C:\Windows\system32\icmp.dll 49
C:\Windows\system32\imageres.dll 55
C:\Windows\system32\imagesp1.dll 58
C:\Windows\system32\iologmsg.dll 58
C:\Windows\system32\lltdres.dll 58
C:\Windows\system32\MapControlStringsRes.dll 55
C:\Windows\system32\Microsoft-WindowsPhone-SEManagementProvider.dll 58
C:\Windows\system32\moricons.dll 61
C:\Windows\system32\msafd.dll 54
C:\Windows\system32\msprivs.dll 55
C:\Windows\system32\neth.dll 52
C:\Windows\system32\netmsg.dll 57
C:\Windows\system32\normaliz.dll 46
C:\Windows\system32\PhoneServiceRes.dll 54
C:\Windows\system32\PhoneutilRes.dll 54
C:\Windows\system32\qedwipes.dll 57
C:\Windows\system32\rnr20.dll 47
C:\Windows\system32\SensorsCpl.dll 44
C:\Windows\system32\SyncRes.dll 57
C:\Windows\system32\tapiui.dll 60
C:\Windows\system32\TelephonyInteractiveUserRes.dll 50
C:\Windows\system32\TpmCertResources.dll 44
C:\Windows\system32\tzres.dll 49
C:\Windows\system32\wbem\WmiApRes.dll 55
C:\Windows\system32\WindowsPowerShell\v1.0\pwrshmsg.dll 55
C:\Windows\system32\wmerror.dll 46
C:\Windows\system32\wmploc.DLL 43
C:\Windows\system32\XAudio2_8.dll 47
C:\Windows\SysWOW64\advapi32res.dll 47
C:\Windows\SysWOW64\asferror.dll 46
C:\Windows\SysWOW64\comres.dll 44
C:\Windows\SysWOW64\DMAppsRes.dll 47
C:\Windows\SysWOW64\dmdskres.dll 50
C:\Windows\SysWOW64\dmdskres2.dll 49
C:\Windows\SysWOW64\ETWCoreUIComponentsResources.dll 44
C:\Windows\SysWOW64\icmp.dll 43
C:\Windows\SysWOW64\imageres.dll 49
C:\Windows\SysWOW64\imagesp1.dll 55
C:\Windows\SysWOW64\iologmsg.dll 57
C:\Windows\SysWOW64\MapControlStringsRes.dll 49
C:\Windows\SysWOW64\moricons.dll 57
C:\Windows\SysWOW64\msafd.dll 52
C:\Windows\SysWOW64\mscpx32r.dLL 55
C:\Windows\SysWOW64\msorc32r.dll 50
C:\Windows\SysWOW64\neth.dll 50
C:\Windows\SysWOW64\netmsg.dll 49
C:\Windows\SysWOW64\normaliz.dll 46
C:\Windows\SysWOW64\PhoneutilRes.dll 50
C:\Windows\SysWOW64\qedwipes.dll 50
C:\Windows\SysWOW64\rnr20.dll 49
C:\Windows\SysWOW64\SensorsCpl.dll 41
C:\Windows\SysWOW64\SyncRes.dll 55
C:\Windows\SysWOW64\tapiui.dll 50
C:\Windows\SysWOW64\TpmCertResources.dll 41
C:\Windows\SysWOW64\tzres.dll 41
C:\WINDOWS\SysWOW64\user.exe 43
C:\Windows\SysWOW64\user.exe 44
C:\Windows\SysWOW64\user.exe 47
C:\Windows\SysWOW64\user.exe 49
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshmsg.dll 52
C:\Windows\SysWOW64\winrsmgr.dll 82
C:\Windows\SysWOW64\wmerror.dll 44
C:\Windows\SysWOW64\wmploc.DLL 44
C:\Windows\SysWOW64\XAudio2_8.dll 49

MIT License. Copyright (c) 2020 Strontic.