RdpSa.exe

  • File Path: C:\WINDOWS\system32\RdpSa.exe
  • Description: RDP Session Agent

Hashes

Type Hash
MD5 3D201343E505141C7837D3F2A70412C5
SHA1 E04B09240A32756DC2AB00A3A73BBDCD6845F793
SHA256 AAAF9A7DCB0B5A40ABD1737B7F9ED279546CCCF4F0D5E52E41F248043F48A760
SHA384 EF69A4F29D756520558D2A31ED769A7449A261A0929DC2FB41061FB042B4D27E403171B007789866F671BD87FCE91033
SHA512 84AFB465350D4D7A083A2A6CC74EE65F05EDBBD8D54C90C52E7070D91E5EFACD32B1E3BDC9DA79D5D8534081CC2281B4D4A38A95BA045D3FCE7BFE9BC275CE97
SSDEEP 1536:IN0zBP+t9ghKGpF/DDZFx+NFGlI7GE+FnuLKZ5BWl:4QFhKGpF7DTx+3GI+FuY50
IMP 9CAB97FF944F0ADB015AB80E6D39F8FD
PESHA1 F487E7A87265C6C74BEF868BFF43D9471F9EFD0E
PE256 3FA7A8AC2D44C62BCBF73EC18372A3D998566755B7BDC0D3AF6A8ECEDCD280FB

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RdpSa.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/aaaf9a7dcb0b5a40abd1737b7f9ed279546cccf4f0d5e52e41f248043f48a760/detection

MIT License. Copyright (c) 2020-2021 Strontic.