rdpinput.exe
by Microsoft
Operating System
Summary
RDP Input - handles input redirection in Remote Desktop sessions.
rdpinput.exe is the 995th most commonly executed Windows program in EchoTrail's dataset, observed 2,121 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by rdpclip.exe.
995th
most commonly executed Windows program
2,121
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- db69c3556c1408ae37cbdedca474de336e02deb2e2dbfa6f5cc54c82761f455729.09%
- 4b79e2eaa6145154fd608b82f802b8dc5d92b8a18bb05b88c57a876435ceb1ba28.95%
- 0327da6cf9c4f737758a45818f1db141a0ba13db7dffe64f472193a8e72a840920.84%
- 9ab55d624ac89b07298d6dfddc6a1a01026914815e05cf67d09fa00eb89ca3b515.89%
- 46a7998700f40e54adcf54efdb4c62ba59784c4ee9510af7dd5c77a1c4f743563.21%
- 6c59ea8b7807d9cc9de5c67cf679a1fb1bed4629da1f0a071e03af775de8e4fc1.13%
- 39bfb2214efeed47f4f5e50e6dff05541e29caeb27966520bdadd52c3d5e71430.42%
- 90ac8010ce14278e4a1967bef64655412d36ab42233d1a8a0b0f2582001339d00.38%
- 831a7177290d16611e09ec1f677cc919fc63fab9949a378412aa1c5b74d33b2c0.09%
Process Ancestry
Top Grandparents
- svchost.exe100%
Top Parents
- rdpclip.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about rdpinput.exe
Rocky answers questions about rdpinput.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.