rdpshell.exe
- File Path:
C:\Windows\system32\rdpshell.exe
- Description: RemoteApp Shell
Hashes
Type | Hash |
---|---|
MD5 | 2E72DBCF0B650CFB8DE025782A760077 |
SHA1 | D88A8C3981655E6E610D01173586ABB9EC9D0490 |
SHA256 | 0BA3EC75C65C2EB4FF89D6CAF49C0E46E6611DFDE6D0B92D9DE18C09D4C77678 |
SHA384 | 06BD1B03A799B30C9752B72B3917DC536655BED6C5F3FC64FE79E75D64654F8D34DE831C3AB1BDA3386998717497DB26 |
SHA512 | D1563F2AEC8F7953CD0396EF443E3D0ACAB4040E78E561422A4B0DF1D6F902C66754B23E4778918C669474C2DBD0421E3AB553393C73D0A408B79E3C9A2D5A45 |
SSDEEP | 12288:bu6cg57GqBj6x4h2oH4a8aIsiLykNcuNnkEX:bu699rxP0mp9iWuS |
IMP | 2A234F3A3B489835EBC515602FAEC4D0 |
PESHA1 | 8253DAD13A986936648A9E83BD5A22E82A12AE52 |
PE256 | 7262E912C0B476B2879BDFEB117BE13F1CA37D6FA4DED231E1E8813D49AE756D |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: rdpshell.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/0ba3ec75c65c2eb4ff89d6caf49c0e46e6611dfde6d0b92d9de18c09d4c77678/detection/
MIT License. Copyright (c) 2020-2021 Strontic.