- File Path:
C:\Windows\system32\winrssrv.dll
- Description: winrssrv
Hashes
| Type |
Hash |
| MD5 |
212FA486A59BD7C40BB0AC574AA16506 |
| SHA1 |
9E2C87C8897B546406104426022C7D75564B23F1 |
| SHA256 |
F2CDEF0BB6317C9D25A824023EB74814635A38FBBB19802A67141122DF170D57 |
| SHA384 |
33C27434B593D074DC34EB0B8F82CF2736EDCBD19C08BA119F24DC6948E7ED5E69A451BC99A763E03079B3987B48DBF8 |
| SHA512 |
0EF9F4205D01F581F27E92A837A14F7D70BE3DA1E842F0EF8E001FE15472CEDFF8EE1B936AE5B155C8B2A666FD90D3165578E59EA38ECD14622EF944152F386A |
| SSDEEP |
192:pGMMmU2bkBEddxUVUTBVz/x0/4AucjPITH2/nSPSA1rv7pKq1rYIqWDdIaUWa:pGMMmYEdde2TrbGjHzONHrvrYhWyvW |
| IMP |
67E3081FC972785F0DA2C9602EEDA4E5 |
| PESHA1 |
2A313CAF280A089A5A1A2BE04849B948220CCD42 |
| PE256 |
932F4CAD846F86DD456D75AE76FC793DF529AE685AA82F6D4CD3FF06717F85E6 |
DLL Exports:
| Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: winrssrv.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/71
- VirusTotal Link: https://www.virustotal.com/gui/file/f2cdef0bb6317c9d25a824023eb74814635a38fbbb19802a67141122df170d57/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.