rdpshell.exe
- File Path:
C:\Windows\system32\rdpshell.exe
- Description: RemoteApp Shell
Hashes
| Type |
Hash |
| MD5 |
763361A7F4774E17110986C2CD7A47C8 |
| SHA1 |
8945494E43722447469171F0CA093F12F83921CD |
| SHA256 |
407A7DCA4722725826F0D2BBEA6D5C774B9D21930D96E66BFDB100D49174816E |
| SHA384 |
63F6B15E38E78AE7A339D4BCC45B47970A01CA03256718483FEE420FFDFF71DA8CE18C40A6EC70203549F69ED98AB536 |
| SHA512 |
C3A12B499FE4B1235F1865E71FEEB1466B2B645C35C4129551CDAD08720BA60DB6DBB536AE88B047F58C86F46B5641743CC005D78216C2C3B4A053EB1DC04A23 |
| SSDEEP |
12288:P7+h2vbzl0GjSQ7pAPFPs41dIdvqxUXs/:P7+h2jzWARKPd9dIdir/ |
| IMP |
64E9F3A61B367A03199B12902099FBE6 |
| PESHA1 |
2C1DB653C7641C55F9BE21E10A9AC3F7B403FA29 |
| PE256 |
450981243CD35BA115AA294469F17A167BB75E0597E81AE57EDACA562D541CCA |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\System32\ADVAPI32.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\CRYPT32.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\OLE32.dll |
| C:\Windows\System32\OLEAUT32.dll |
| C:\Windows\system32\rdpshell.exe |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\shcore.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: rdpshell.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/407a7dca4722725826f0d2bbea6d5c774b9d21930d96e66bfdb100d49174816e/detection
MIT License. Copyright (c) 2020-2021 Strontic.