rdpshell.exe

  • File Path: C:\Windows\system32\rdpshell.exe
  • Description: RemoteApp Shell

Hashes

Type Hash
MD5 932235B5293C63ED3F44763679EDD9A6
SHA1 03266463AB98110B4D5C70690C8F028F2370CAFA
SHA256 B993C11D6B0D0CECEA703EBC4A26BB0C637992B881156CD9184CC899BD74C383
SHA384 B8E5AF363E10D8DD82608780D4CDC635530D415E11D2B8F62AAD055F4D5215048A000EF4BE50DC3DAC75446644EDA2A7
SHA512 F27E306A9D6844EABAB7F1178484AF7F9BADD1E5145B97D0D356A58FE5DD188952AF7AB21BB4FD11FD368A7A91B679947859527532F8F13646C5E7FE891B837F
SSDEEP 6144:CQO4sIYcDoPOPwoECHz+2rzmk5trop0OrNxWJr+dVbO1/IcM:CQOZnPOPyCHfzV9oprNxWcdFO1/

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rdpshell.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\rdpshell.exe 80
C:\Windows\system32\rdpshell.exe 80

MIT License. Copyright (c) 2020-2021 Strontic.