CmdID

CmdID / Files

TSErrRedir.dll

Remote Desktop Services Logon Error Redirector file version info

Library on Windows 1 known copy with hashes

Is it the real TSErrRedir.dll?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionRemote Desktop Services Logon Error Redirector

1 known copy

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\TSErrRedir.dll · signed by Microsoft Windows

SHA-256b38e0cb864c82ee966d0f1331000520c5e215760383cfd595fc8f1c7289a2866SHA-1742f219d8a7487830d477fb2f829d87143452555MD5cdcccb22732954506760c86a9e1e9ba6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.