File scan report
Verdict Safe
Is RDPWrap
None of the 71 antivirus engines that checked it flagged this validly signed Remote Desktop utility installer, and four sandbox runs recorded ordinary installer activity with a…
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This installer appears safe to use when obtained from the project's official release page. Keep your antivirus enabled during installation.
Good practice2 tips
We found nothing harmful in this file.
Install it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 71 flagged
- Flagged 0
- No detection 71
- No result 4
- Code signing CpdX4, LLC
- Test run Completed
- First seen 8d ago
Chapter 02
Why we think so
2 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
No antivirus engine in our network flagged this installer, and its signature from CpdX4, LLC verifies. In four sandbox runs it unpacked a standard setup program, wrote a log file and queried GitHub for the latest release. The combined sandbox verdict was clean, with no high-risk techniques observed.
The file carries a valid signature from CpdX4, LLC, a publisher with no prior history in our records. Across four sandbox runs, the combined verdict was clean, and the only notable network activity was a request to GitHub's API for the latest release. The antivirus analysis notes a code protector, which is common in small commercial tools and is not corroborated by any hostile evidence. Files built with the same import table show mixed past results, but they come from unrelated publishers and say little about this one.
What We Detected
None of the 71 antivirus engines that checked it flagged this installer, and every major antivirus engine reported it clean. Its code signature from CpdX4, LLC verifies. No public malware database or community rule lists this file, which was first seen on Oct 17, 2026.
Threat Behavior
In four sandbox runs the installer extracted a standard setup program and helper files to a temporary folder. It also wrote an installation log and contacted GitHub's API to check for the latest release. No process injection target, persistence mechanism or high-risk technique was recorded, and the combined sandbox verdict was clean. The antivirus analysis reports a .NET code protector, which makes the code harder to read but is not malicious in itself.
What To Do Now
Download this tool only from its official project page. Be aware that Remote Desktop session tools change Windows system components, which some workplaces do not allow. Keep your antivirus enabled during installation.
Where this verdict could be wrong3 caveats
- The installer carries a .NET Reactor protector, which hides code from inspection, though no engine or sandbox run found anything hostile.
- The publisher has no history with us, and the file was first seen on Oct 17, 2026, so its reputation is still thin.
- Tools that enable extra Remote Desktop sessions modify Windows system components, which some organisations prohibit by policy.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 71 antivirus engines that checked it flagged the file.
- The code signature from CpdX4, LLC verifies.
- Four sandbox runs showed ordinary installer activity with a clean combined verdict.
- No public malware database or community rule lists this file.
- The code is wrapped in a protector that hinders inspection.
- The signing publisher has no history in our records.
7 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 4 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 4isolated sandbox runs
- 13sandbox rule tags
- 5spawned processes
- 3network contacts
- 11filesystem & mutex artifacts
Includes the sandbox verdicts, 13 mapped techniques, every process, file, registry and network entry and 4 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 71 antivirus engines that checked it flag it; signed by CpdX4, LLC.
Sources checked
Every check behind this verdict
7 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 25, 2026, 2:44 PM UTC
- SHA-256
d1d4fb691cd93e61fa8f073760497b6d4699ff3be848df95d9052766b2d6cc23- SHA-1
2e612d84e70eca5a0fd8cb451abd65e96b0dc6af- MD5
4de78519eb9d67bab6ae6dcaa2f6406b
About this file
RDPWrapKit-Setup.exe is a Win32 EXE file of 3.6 MB.
- Claims to be
- RDPWrapKit Setup (RDPWrapKit)From the file's own version information, written by whoever built it.
- Type and size
- Win32 EXE · 3.6 MB
- Signer
- CpdX4, LLCValid code signature.
- First seen
- Oct 17, 2026On VirusTotal.
- Submitted by
- 88 distinct sources
- Packer
- .NET Reactor 2.X-3.X (DetectItEasy protector)Packing hides code; legitimate installers use it too.
- Entropy
- 7.02 of 8
First scanned
Verdict history
- Not fully confirmed
- Safeafter the analysis was completed
Ratings change when antivirus engines, our checks or MalwareTips staff learn more about a file.
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is RDPWrapKit-Setup.exe safe?
What is RDPWrapKit-Setup.exe?
How many antivirus engines detected RDPWrapKit-Setup.exe?
Is RDPWrapKit-Setup.exe digitally signed?
What is the SHA-256 hash of RDPWrapKit-Setup.exe?
Is it safe to install RDPWrapKit-Setup.exe?
How up to date is this analysis of RDPWrapKit-Setup.exe?
Community
Member reviews and reports for this exact file hash.