Gridinsoft Logo

The RpcRtRemote.dll (Remote RPC Extension) File Analysis

Updated 2 months ago
Checked by Malaware Check
RpcRtRemote.dll

Technical Analysis

File Name RpcRtRemote.dll
File Type
PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 22:00:46 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
66,304
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
42eca3b1649e1168bea64a42b54d21f7
SHA1
338689f735e273bd38a9c7cd45f8d989e08ad879
SHA256
0b1d466ce916d13e4aa759f629aa73e62642a6d0935c9fc8e0fac86472d33f49
SHA512
3c5dc2e812c9c2088dd7193cccf6e7e2bf2d48be3c697c10c2ea21524893740bcb0839f3abc5537820c43fc9ae6d6b97b03414a2065afe43c8a0883f4e920af4
ImpHash
d7107d3c2118cf789ac1fb05f4786dd1

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x1800015e0
Compilation Time 2096-12-14 23:37:13
Checksum 0x0001213e (Actual: 0x0001213e)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (console) x86-64, for MS Windows
PDB Path RpcRtRemote.pdb
Digital Signature OK
Imports 18 libraries
Exports 10 functions
Resources 1 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Remote RPC Extension
FileVersion 10.0.19041.5438 (WinBuild.160101.0800)
InternalName RpcRtRemote.dll
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename RpcRtRemote.dll
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.5438
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 31,790 bytes 32,256 bytes 6.03 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C0B19FBC1B5404A76B8FB1BAEDAAA71E
.rdata 0x00009000 16,650 bytes 16,896 bytes 4.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B85954B5399467180522F773AE28A7DD
.data 0x0000e000 2,268 bytes 1,024 bytes 1.57 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F923ECB18F739881076E588D47257563
.pdata 0x0000f000 1,788 bytes 2,048 bytes 3.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8AB686FF6088DE94782D8762E272FEA8
.didat 0x00010000 312 bytes 512 bytes 1.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 64D4C2590C9F32EC35A35024003DD9CC
.rsrc 0x00011000 1,032 bytes 1,536 bytes 2.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5BA2DB52D8746929BA5925F469C75189
.reloc 0x00012000 456 bytes 512 bytes 4.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ B76ACFD6DC410FEFB5F9EA849F421D65

Resource Analysis

▼
Total Resources: 1 (936 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 936 bytes
100%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Remote RPC Extension
File Version 10.0.19041.5438 (WinBuild.160101.0800)
Original Name RpcRtRemote.dll
Signing Date 06:03 PM 01/22/2025 (135 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name RpcRtRemote.dll
Copyright © Microsoft Corporation. All rights reserved.
Certificate Chain Summary
Microsoft Windows #1 Primary
Validity Period: 2024-09-12 20:04:07 → 2025-09-11 20:04:07
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 04 A8 82 E6 B8 AC 1C 5D 5F F0 00 00 00 00 04 A8
Microsoft Windows Production PCA 2011 #2 Chain
Validity Period: 2011-10-19 18:41:42 → 2026-10-19 18:51:42
Signature Algorithm: sha256RSA
Serial Number: 61 07 76 56 00 00 00 00 00 08
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2024-07-25 18:31:18 → 2025-10-22 18:31:18
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 FE D0 A8 C2 7B 34 21 0B 01 00 01 00 00 01 FE
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware