home

RemoteDesktopManager.exe

Remote Desktop Manager

Devolutions inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RemoteDesktopManager’.
Publisher:
Devolutions inc.  (signed and verified)

Product:
Remote Desktop Manager

Version:
6.5.1.0

MD5:
461233ed98348837bd9db32403af737b

SHA-1:
04b55913c2b213a2e0df016479fb05c2c22fa318

SHA-256:
fabeff43849f8c1981698e2134df03d93564e988bb98da3812d991cfd474402d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:46:57 PM UTC  (today)

File size:
3.4 MB (3,567,392 bytes)

Product version:
6.5.1.0

Copyright:
Copyright © 2006-2011

Original file name:
RemoteDesktopManager.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\devolutions\remote desktop manager\remotedesktopmanager.exe

Digital Signature
Signed by:
Devolutions inc.

Authority:
The USERTRUST Network

Valid from:
8/24/2010 8:00:00 PM

Valid to:
8/24/2013 7:59:59 PM

Subject:
CN=Devolutions inc., O=Devolutions inc., STREET=40 Des Jardins, L=Lavaltrie, S=Quebec, PostalCode=J5T1T7, C=CA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1DFBDDA59F36B647CD285E0999043C4B

File PE Metadata
Compilation timestamp:
9/30/2011 7:14:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:PVH9B/LDZZsOv58AnRlsiL6z1iCi+KHC+YZ0Is6:59B/LDZZsOB8QsqutlKHoaK

Entry address:
0x34D3EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9776

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.3 MB (3,457,024 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RemoteDesktopManager

Command:
"C:\Program Files\devolutions\remote desktop manager\remotedesktopmanager.exe" \silent


Scan RemoteDesktopManager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.