Should I block it?

No, this file is 100% safe to run.

Additional versions

14.1.0.0	12.50%
14.0.0.91	12.50%
13.4.0.25	12.50%
13.3.0.55	37.50%
13.0.0.6685	12.50%
13.0.0.6684	12.50%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegCloseKey, RegQueryValueExW, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, TraceEvent

kernel32.dll

GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, Sleep, InterlockedExchange, FreeLibrary, LocalFree, LocalAlloc, InterlockedCompareExchange, GetModuleFileNameW, GetLastError, GetCurrentProcessId, GetProcAddress, LoadLibraryW

msvcr80.dll

DllMain

user32.dll

GetParent, SetWindowsHookExW, PostMessageW, GetWindowThreadProcessId, CallNextHookEx, SetForegroundWindow, SendMessageTimeoutW, IsWindow, FindWindowW, RegisterWindowMessageW, UnhookWindowsHookEx, GetForegroundWindow

Export table

RSMHookCallWndProc

RSMHookLoad

RSMHookUnload

rsmhook.dll

Citrix ICA Client by Citrix Systems (Signed)

Remove rsmhook.dll

Version:	14.1.0.0
MD5:	23d7728c16103222e90b983a1306481d
SHA1:	7dc64ecfc54f2cb4aabe910075786b25fb44dccd

Overview

rsmhook.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Citrix Systems which was issued by the VeriSign certificate authority (CA).

Details

File name:	rsmhook.dll
Publisher:	Citrix Systems, Inc.
Product name:	Citrix ICA Client
Description:	Citrix Reverse Seamless Manager Applicaton Hook DLL
Typical file path:	C:\Program Files\citrix\ica client\rsmhook.dll
Original name:	RMHOOK.DLL
File version:	14.1.0.0
Product version:	14.1.0
Size:	28.88 KB (29,576 bytes)
Build date:	10/2/2013 12:06 AM
Certificate
Issued to:	Citrix Systems
Authority (CA):	VeriSign
Effective date:	Wednesday, February 8, 2012
Expiration date:	Monday, March 31, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No