BackgroundTransferHost.exe

  • File Path: C:\Windows\system32\BackgroundTransferHost.exe
  • Description: Download/Upload Host

Hashes

Type Hash
MD5 BF255B52B25761E750889EA4984C328D
SHA1 A8139027AFDACFE20ECFE204FB495B40A3CD3236
SHA256 50E46406C00182189F74EC64CA3AED40B35B99F999B254BE4205C1E7DE3194F6
SHA384 8BBBE506FA60A6B71F28D61D220580388F96D6999C57B2B6E94655374B87A0E5B5A4389CDF114132095B0BFFA3196980
SHA512 22296D8CBD4BC009CE7F62E0BD55FB3461A14CC9B37A73B70FBC7892D4E912E753AE6306E46AF0D2602B0AF028B6C6DC87B4EC0C7BEAB00CEFB4EB5B27154E72
SSDEEP 384:cWvdgXRnD6omd6W23IkskDPocFsp2WveSdpW0rgWwQE0g7qW2RPT/8rFeZmJhk:LynOD2YUhUeIfo2a
IMP 43BA7C14F952D3784267C6946F79BD81
PESHA1 CE43B2EA6F5B7EA2A8018245BC0CBE32D53A9785
PE256 467ED5D3234FB9684F4AF0406C13B1671F5C7667900B13C361122A5BA396461E

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\BackgroundTransferHost.exe
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\clbcatq.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RMCLIENT.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\twinapi.appcore.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\WinTypes.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: BackgroundTransferHost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/50e46406c00182189f74ec64ca3aed40b35b99f999b254be4205c1e7de3194f6/detection/

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\BackgroundTransferHost.exe 71
C:\Windows\system32\BackgroundTransferHost.exe 57
C:\Windows\system32\BackgroundTransferHost.exe 47
C:\WINDOWS\system32\BackgroundTransferHost.exe 41
C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 50
C:\Windows\SysWOW64\BackgroundTransferHost.exe 50
C:\Windows\SysWOW64\BackgroundTransferHost.exe 50
C:\Windows\SysWOW64\BackgroundTransferHost.exe 57
C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 52

MIT License. Copyright (c) 2020-2021 Strontic.