General

  • Target
    RDCMan.exe
  • Size 69.6MB
  • Sample260928-tcj22sys7j
  • SHA256 8d94f8d6904ae4afc282599155aeba84d29163c00aa36bbe6c314bef4a40e27b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • RDCMan.exe
    .exe 69.6MB

RDCMan.exe

  • IMPHASH 8a34d2e5912e3d13caec44729685a874
  • SHA256 8d94f8d6904ae4afc282599155aeba84d29163c00aa36bbe6c314bef4a40e27b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
11:52:82:71:82:5b:af:9a:03:b2:bb:1b:67:65:48:9b:7a:99:33:17:ed:f2:b3:4f:20:b2:79:97:7d:a7:95:c1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
6
Entry point
6066544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb