RdpSa.exe

  • File Path: C:\Windows\system32\RdpSa.exe
  • Description: RDP Session Agent

Hashes

Type Hash
MD5 8B0E3A0C7B04E726AE7312DE79E6A817
SHA1 956C964BC22F0C11458A1964431C70CBA964991D
SHA256 7BEA697939C4D7C207D1A7C3EA109392D214868311A7BDF1E8055367D9D27238
SHA384 2550840C994689E7F5EC991F09A03489E1EA12D44EB4AFA79AF3AFEC52A803A8767ACEFA1C24A2FF58FB4A3820888DC0
SHA512 695F892B217C45C51E13E0C422C118BCD55BAD8216578C01648E0D454D5437D22377FA62C3CC658B29F44A140D8C2AF704AB0A82372032CA8B1D034FA9EFD5A8
SSDEEP 768:gxjO/6AOeyqPsaaoRHRRXQoGGysFwZ3l27eeMeJJNtFAGqR:HGqLmoVzwX27eBedzZqR
IMP 3619BD154055B4F6C99B1940FA8DD864
PESHA1 E8181BBFCFD8371EAEDFC2DFB8FFD6D2A559B095
PE256 B1F83C477FBF6D61B33AA1542C650370367EF8EBFFBA624D5B479496EC745C75

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RdpSa.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/64
  • VirusTotal Link: https://www.virustotal.com/gui/file/7bea697939c4d7c207d1a7c3ea109392d214868311a7bdf1e8055367d9d27238/detection/

MIT License. Copyright (c) 2020-2021 Strontic.