CmdID / Files

tssrvlic.dll

RD Server Licensing Policy Module file version info

Library on Windows 1 known copy with hashes

Is it the real tssrvlic.dll?

file version info and known copies

Installed inC:\Windows\system32\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionRD Server Licensing Policy Module

1 known copy

10.0.19041.153 (WinBuild.160101.0800) · C:\Windows\system32\tssrvlic.dll · signed by Microsoft Windows

SHA-256bdf2cac033923272668059f9fe38afe59cf2cb86ad4b9fc7ec9d88d61b6c6d48SHA-1edb966e9ecace4eba926510c3a746e01b0d3330eMD5363daecc0449ce915cad472d1934e4d9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.