home

rdssclient.exe

MIS Utilities

Publisher:
MIS Utilities  (signed and verified)

MD5:
e2127b4cd27390dce8bac4c07fda077f

SHA-1:
55443acd2c5a01dee5ff752c207b31c875bb1262

SHA-256:
9b9ceb63b1212cd665c6de2fc0ebdeb481b8c7e484f1f24a9f3acacd56d1ad25

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 3:20:22 PM UTC  (today)

File size:
557.4 KB (570,816 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\rdssclient.exe

Digital Signature
Signed by:
MIS Utilities

Authority:
COMODO CA Limited

Valid from:
8/20/2012 5:30:00 AM

Valid to:
8/21/2013 5:29:59 AM

Subject:
CN=MIS Utilities, O=MIS Utilities, STREET=Kharkivske shose 51-104, L=Kyiv, S=Ukraine, PostalCode=02096, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5CB41207023892AE294AC3E6E34B4A86

File PE Metadata
Compilation timestamp:
5/29/2013 5:36:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:f3Q1Smx8qpQG6tQlqpNuH20n4156+6fVwnrAZN4XyknuTQ76F:PwxCrGcQEpMH20n4++cVwroYduTA6F

Entry address:
0x78824

Entry point:
55, 8B, EC, 83, C4, E0, 53, 56, 57, B8, AC, 70, 47, 00, E8, 49, DE, F8, FF, BF, 04, 41, 48, 00, 33, C0, 55, 68, D6, 8A, 47, 00, 64, FF, 30, 64, 89, 20, B2, 01, A1, 5C, CA, 41, 00, E8, 5E, 9F, FA, FF, A3, D4, 40, 48, 00, B2, 01, A1, 90, 01, 47, 00, E8, A1, C5, FF, FF, A3, 00, 41, 48, 00, 33, C0, 55, 68, BE, 8A, 47, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, AD, 8A, 47, 00, 64, FF, 30, 64, 89, 20, E8, F7, E7, F8, FF, 50, E8, E1, E7, F8, FF, A3, EC, 40, 48, 00, 83, 3D, EC, 40, 48, 00, 00, 6A, 4D, E8, BE, E8...
 
[+]

Entropy:
6.6674

Developed / compiled with:
Microsoft Visual C++

Code size:
476 KB (487,424 bytes)

Scan rdssclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.