rdpshell.exe

  • File Path: C:\Windows\system32\rdpshell.exe
  • Description: RemoteApp Shell

Hashes

Type Hash
MD5 2E72DBCF0B650CFB8DE025782A760077
SHA1 D88A8C3981655E6E610D01173586ABB9EC9D0490
SHA256 0BA3EC75C65C2EB4FF89D6CAF49C0E46E6611DFDE6D0B92D9DE18C09D4C77678
SHA384 06BD1B03A799B30C9752B72B3917DC536655BED6C5F3FC64FE79E75D64654F8D34DE831C3AB1BDA3386998717497DB26
SHA512 D1563F2AEC8F7953CD0396EF443E3D0ACAB4040E78E561422A4B0DF1D6F902C66754B23E4778918C669474C2DBD0421E3AB553393C73D0A408B79E3C9A2D5A45
SSDEEP 12288:bu6cg57GqBj6x4h2oH4a8aIsiLykNcuNnkEX:bu699rxP0mp9iWuS
IMP 2A234F3A3B489835EBC515602FAEC4D0
PESHA1 8253DAD13A986936648A9E83BD5A22E82A12AE52
PE256 7262E912C0B476B2879BDFEB117BE13F1CA37D6FA4DED231E1E8813D49AE756D

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rdpshell.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/0ba3ec75c65c2eb4ff89d6caf49c0e46e6611dfde6d0b92d9de18c09d4c77678/detection/

MIT License. Copyright (c) 2020-2021 Strontic.