home

RPFPlayback.dll

Record Playback Framework

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Record Playback Framework

Version:
6.3.9431.0 (winmain_bluemp.130615-1214)

MD5:
de7a6011d895192a5a5eb93f9b5d1b0e

SHA-1:
96c828e7f768d94250b9931660ae78483d1fdc97

SHA-256:
45f7b8f631885caaee68f4e741c040a43178648933d828bbbc60465067f4d09b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 9:13:58 PM UTC  (today)

File size:
590.2 KB (604,384 bytes)

Product version:
6.3.9431.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
RPFPlayback.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\windows kits\8.1\assessment and deployment kit\windows assessment toolkit\content based assessments\x86\rpfplayback.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
MSIT Test CodeSign CA 3

Valid from:
2/28/2013 4:28:51 PM

Valid to:
6/21/2014 7:05:01 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=MSIT Test CodeSign CA 3, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:
7A5C1F17000000D6299F

File PE Metadata
Compilation timestamp:
6/15/2013 6:52:40 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:PqvekKMbk26aY7owh65zTVcdsgOwmJU11DFcYv3LUCbSnicVr1wbKVAY2k:3qk2HY7i5zSdsBwmK1Fc8HawYAY2k

Entry address:
0x57C51

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 06, 4B, 00, 00, 5D, E9, DF, 01, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, 98, 00, 00, 00, A1, F0, 5A, 07, 10, 33, C5, 89, 45, FC, 8B, 45, 0C, 56, 83, F8, 01, 0F, 85, DF, 00, 00, 00, 8D, 85, 68, FF, FF, FF, C7, 85, 68, FF, FF, FF, 94, 00, 00, 00, 50, FF, 15, 7C, B1, 08, 10, 85, C0, 75, 07, 33, C0, E9, 5B, 01, 00, 00, 8B, B5, 74, FF, FF, FF, 8B, 85, 78, FF, FF, FF, 81, E6, FF, 7F, 00, 00, 83, F8, 02, 74, 06, 81, CE, 00, 80, 00, 00, 8B, 95, 6C, FF...
 
[+]

Entropy:
5.9472

Code size:
461 KB (472,064 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.