RdpSa.exe

  • File Path: C:\WINDOWS\SysWOW64\RdpSa.exe
  • Description: RDP Session Agent

Hashes

Type Hash
MD5 DE63E0708267738DC02625E1385FB3E4
SHA1 506D610799E97D191F50F7108C837CDE30928AF8
SHA256 974FA8DE39345E8B2A91AE97D8291CEB6F3EE2DD1BED9378CED9EF715027ADD6
SHA384 1219D7812985C0738DA2098042B53585B333510E4A5AEA75AF696E7B19C2751ED7A15A592E8D319C11E86CDD2F20D320
SHA512 ABBE5213AEE7AFAAC7402B7922ABB7490CCEFB6680B5A2E3830254083D5BFA718ADE8AA7E7E5BAC11C935FCFA914A5CDC2B2FA54327A30CF107890A1CBC0168A
SSDEEP 768:AknlU1oEFy0A3hJGcaVN2XUz3DjOGXV+sqdV+f4ZuxFWleyl:Aw+13A0AxJLa+XUz3DjOGY5TPZuxFWle
IMP 4D86CE84E4EB6CE9E7C94F1E0F629BC5
PESHA1 69D934EB6CB28F91DC252015DDF90B96FC8D2E32
PE256 0ACC56BFCBFFC5783A9F7264EF652198A4F4C0A2A058B61D551AD06594909FB2

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RdpSa.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/974fa8de39345e8b2a91ae97d8291ceb6f3ee2dd1bed9378ced9ef715027add6/detection

MIT License. Copyright (c) 2020-2021 Strontic.