Should I block it?

No, this file is 100% safe to run.

Additional versions

14.1.0.0	12.50%
14.0.0.91	12.50%
13.4.0.25	12.50%
13.3.0.55	37.50%
13.0.0.6685	12.50%
13.0.0.6684	12.50%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegCloseKey, RegQueryValueExW, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, TraceEvent

kernel32.dll

GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, Sleep, InterlockedExchange, FreeLibrary, LocalFree, LocalAlloc, InterlockedCompareExchange, GetModuleFileNameW, GetLastError, GetCurrentProcessId, GetProcAddress, LoadLibraryW

msvcr80.dll

DllMain

user32.dll

GetParent, SetWindowsHookExW, PostMessageW, GetWindowThreadProcessId, CallNextHookEx, SetForegroundWindow, SendMessageTimeoutW, IsWindow, FindWindowW, RegisterWindowMessageW, UnhookWindowsHookEx, GetForegroundWindow

Export table

RSMHookCallWndProc

RSMHookLoad

RSMHookUnload

rsmhook.dll

Citrix ICA Client by Citrix Systems (Signed)

Remove rsmhook.dll

Version:	14.0.0.91
MD5:	e86e4679e80090318be776afb5fb09dc
SHA1:	13b3a563935a70efe32b58df949c688a14886147

Overview

rsmhook.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Citrix Systems which was issued by the VeriSign certificate authority (CA).

Details

File name:	rsmhook.dll
Publisher:	Citrix Systems, Inc.
Product name:	Citrix ICA Client
Description:	Citrix Reverse Seamless Manager Applicaton Hook DLL
Typical file path:	C:\Program Files\citrix\ica client\rsmhook.dll
Original name:	RMHOOK.DLL
File version:	14.0.0.91
Product version:	14.0.0
Size:	28.88 KB (29,576 bytes)
Build date:	6/14/2013 4:42 PM
Certificate
Issued to:	Citrix Systems
Authority (CA):	VeriSign
Effective date:	Wednesday, February 8, 2012
Expiration date:	Monday, March 31, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No