Gridinsoft Logo

The RTWorkQ.dll (Realtime WorkQueue DLL) File Analysis

Updated 2 months ago
Checked by Malaware Check
RTWorkQ.dll

Technical Analysis

File Name RTWorkQ.dll
File Type
PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 22:00:46 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
184,600
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
078b900602b62a6eeb7b6615a2ae0b58
SHA1
5e910aa95e073ef57715f167ba26f194acd406a7
SHA256
89e39f13f636c2f992d99afc81cafbf0d9d21717f2554dcc2504f5de2f2a66a1
SHA512
3d1283f4554a60d619baad8fac986b392df98ddfc753c42a23cbef984de16878e6bf1db232d687ba5b221419cd241f5ff08092d83e5987248413ad6fcd7cdba0
ImpHash
b9047688f735418f4b96b2d9a19f3d26

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x18000b6b0
Compilation Time 2006-08-15 18:38:19
Checksum 0x0003877f (Actual: 0x0003877f)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (console) x86-64, for MS Windows
PDB Path rtworkq.pdb
Digital Signature OK
Imports 26 libraries
Exports 37 functions
Resources 3 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Realtime WorkQueue DLL
FileVersion 10.0.19041.4842 (WinBuild.160101.0800)
InternalName Realtime WorkQueue DLL
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename RTWorkQ.dll
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.4842
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 104,581 bytes 104,960 bytes 6.08 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 70E2C706A188A2F008119BE23B679952
.rdata 0x0001b000 25,050 bytes 25,088 bytes 5.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 17F0F105463A967414C6F5D3C3A092A9
.data 0x00022000 19,636 bytes 512 bytes 1.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3DF1BA3C580FAD5AADFF33601AEED177
.pdata 0x00027000 8,496 bytes 8,704 bytes 5.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5A5ABD9837302A933ADB496A529B3F2D
.didat 0x0002a000 128 bytes 512 bytes 0.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D4FD34069D3260D32F77B4750A4C0442
.rsrc 0x0002b000 30,992 bytes 31,232 bytes 3.86 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A73901D24A6AC6865512D891395D8D27
.reloc 0x00033000 784 bytes 1,024 bytes 4.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C754749E24E846448CA1C3FDE3BB4348

Resource Analysis

▼
Total Resources: 3 (30,710 bytes)
Resource Type Count Total Size Percentage
MUI 1 232 bytes
0.8%
WEVT_TEMPLATE 1 29,530 bytes
96.2%
RT_VERSION 1 948 bytes
3.1%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Realtime WorkQueue DLL
File Version 10.0.19041.4842 (WinBuild.160101.0800)
Original Name RTWorkQ.dll
Signing Date 04:12 AM 08/17/2024 (292 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name Realtime WorkQueue DLL
Copyright © Microsoft Corporation. All rights reserved.
Certificate Chain Summary
Microsoft Windows #1 Primary
Validity Period: 2023-11-16 19:20:09 → 2024-11-14 19:20:09
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 04 60 CF 42 A9 12 31 5F 6F B3 00 00 00 00 04 60
Microsoft Windows Production PCA 2011 #2 Chain
Validity Period: 2011-10-19 18:41:42 → 2026-10-19 18:51:42
Signature Algorithm: sha256RSA
Serial Number: 61 07 76 56 00 00 00 00 00 08
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2024-07-25 18:31:09 → 2025-10-22 18:31:09
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 F9 1F 67 8D 75 AB A4 F1 B1 00 01 00 00 01 F9
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware