home

RPFPlayback.dll

Record Playback Framework

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Record Playback Framework

Version:
6.3.9600.16384 (winblue_rtm.130821-1623)

MD5:
b22c3a1a332335c3b3f250e95e6b9ccf

SHA-1:
c8bb177abcab9c040d5ad054336b14e412789b3a

SHA-256:
8b534ad1c163447ef9b218f33fedf91e405c7606bec28431af5d145834640c3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 11:09:47 AM UTC  (today)

File size:
590.2 KB (604,384 bytes)

Product version:
6.3.9600.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
RPFPlayback.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\windows kits\8.1\assessment and deployment kit\windows assessment toolkit\content based assessments\x86\rpfplayback.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
MSIT Test CodeSign CA 3

Valid from:
2/28/2013 2:28:51 PM

Valid to:
6/21/2014 5:05:01 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=MSIT Test CodeSign CA 3, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:
7A5C1F17000000D6299F

File PE Metadata
Compilation timestamp:
8/21/2013 9:34:32 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:3shloyFg4Uo/V8FVz9i96N0hG/d0J+MM8FQw/cqGO5O1+Q/d21wbKrCIJIzO:b4F/wZwxGVmrFQv51dUwslJIzO

Entry address:
0x57C51

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 06, 4B, 00, 00, 5D, E9, DF, 01, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, 98, 00, 00, 00, A1, F0, 5A, 07, 10, 33, C5, 89, 45, FC, 8B, 45, 0C, 56, 83, F8, 01, 0F, 85, DF, 00, 00, 00, 8D, 85, 68, FF, FF, FF, C7, 85, 68, FF, FF, FF, 94, 00, 00, 00, 50, FF, 15, 7C, B1, 08, 10, 85, C0, 75, 07, 33, C0, E9, 5B, 01, 00, 00, 8B, B5, 74, FF, FF, FF, 8B, 85, 78, FF, FF, FF, 81, E6, FF, 7F, 00, 00, 83, F8, 02, 74, 06, 81, CE, 00, 80, 00, 00, 8B, 95, 6C, FF...
 
[+]

Entropy:
5.9482

Code size:
461 KB (472,064 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.