RdpSaUacHelper.exe

  • File Path: C:\WINDOWS\system32\RdpSaUacHelper.exe
  • Description: RDP Session Agent UAC Helper

Hashes

Type Hash
MD5 EA3B6230C50BE489D38DA40BA66EA3DA
SHA1 D70C4670BF6001CC18CBDBE50270F0B4989C12DF
SHA256 3D2835B1F8C0C4E4395D3517EC9E9DFCCEE7AD99F3C632F9F6DFEBA0F833712D
SHA384 D9DA0464885A42E21CF6C46DBE0A49C9D6253134E0B14C37F25EE04EE665E568652B4B675EB50D47B19DBCFACE81EF03
SHA512 9F5AF3328E8B0176F9F934579601BB920C95D57444CAB5FBF61C708912C485E2C42555679A5846F815FCED5FF7FD543F3B72342BEB92FE8BB3B59C04651D18B9
SSDEEP 768:NXpdiiC1w1OyosTHuljwdNxyoF/kOKM+CN5Z26Yz:ppdiiRkXsSlj8NxD/kXM+4Z26Y
IMP 8AF12EDD150A1168DC2B3C264D8F5383
PESHA1 D239B462E43799C8D3FA4888CE0B1C817593BC41
PE256 DB34B26A7F60043762F9750863687FE4C660439C5CA086609A6F1E58D6F0B554

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\system32\RdpSaUacHelper.exe
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\system32\WINSTA.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RdpSaUacHelper.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.120 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.120
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/3d2835b1f8c0c4e4395d3517ec9e9dfccee7ad99f3c632f9f6dfeba0f833712d/detection

MIT License. Copyright (c) 2020-2021 Strontic.