BackgroundTransferHost.exe

  • File Path: C:\Windows\SysWOW64\BackgroundTransferHost.exe
  • Description: Download/Upload Host

Hashes

Type Hash
MD5 0E57CCE96CEE6080C8CB279836EB712C
SHA1 4748B141CFBB0DD1BCF3767921ED5ADB5BE13309
SHA256 3E77EAAE650E851AA72330A76EC536CEAC253EF9B770E7BFB7E1F5B1571D410D
SHA384 D78C4BBFFD3FE77199745E571B8A2DFEDB103D7EE5ECDC2EF78FFFBFD7CC368DC4B2E75E528363280594421A9D0F9D11
SHA512 C0DC9E8DBC7C17E3914F093F287AEC64BBD5375821AF14063B92E96AD136EBC732AA35E06A8217012395A4388152FE4D88709854F706CCEC75E54DA5DC6E2456
SSDEEP 384:C7sJronoLPegX1wv1vS/t0xspKMVeB/W0mgW5QE0g7qW2RPT/8rFeZmJhS4:C7sJrYoL2uKY0QeBYB2au
IMP 2C84391D64B2AF34A9B9E60431B39091
PESHA1 E1FAE714F2373BD460C96449F841D9E92F2665A7
PE256 A3EB33796C7316B7BBBC4489D7AA90A9648C62C0C8585666280CAD288FFA01BF

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\BackgroundTransferHost.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: BackgroundTransferHost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.746 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.746
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/3e77eaae650e851aa72330a76ec536ceac253ef9b770e7bfb7e1f5b1571d410d/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\BackgroundTransferHost.exe 47
C:\Windows\system32\BackgroundTransferHost.exe 50
C:\Windows\system32\BackgroundTransferHost.exe 50
C:\Windows\system32\BackgroundTransferHost.exe 50
C:\WINDOWS\system32\BackgroundTransferHost.exe 38
C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 58
C:\Windows\SysWOW64\BackgroundTransferHost.exe 66
C:\Windows\SysWOW64\BackgroundTransferHost.exe 55
C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 55

MIT License. Copyright (c) 2020-2021 Strontic.