CloudExperienceHostBroker.exe
- File Path:
C:\Windows\system32\CloudExperienceHostBroker.exe
- Description: CloudExperienceHost Broker
Hashes
| Type |
Hash |
| MD5 |
1578230CF657A6562A7DE7BA97DE434E |
| SHA1 |
8C02CB0C1CAA24ACB8D521E9F133D019E94E31E3 |
| SHA256 |
D2A6BD3AA9853D5E4026C5F65AC60DA579E4A94C90FFA636D4C70F070DBA82F6 |
| SHA384 |
F8A0999FBAE319EE104DE8708A0BFC787FE857C29B6F8E8E167066E87441C335518B62020D5BA77AB34F0B32E7BD65F3 |
| SHA512 |
FA4C438EF446AD210F036642DCB57C585F366949A288FC5799DCB2190B34A1F1E2C94FD40AA69C499C14C52542B7A04B9F8964A1BE35FEDB521023E168908D43 |
| SSDEEP |
1536:II52JYKVSLrRQMEuvdTb0gu+ElQL/zEnHB1fMpP2:IzARDEuvC+EiL/IH7f0u |
Runtime Data
Open Handles:
| Path |
Type |
| (RW-) C:\Users\user\Documents |
File |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
| \RPC Control\DSEC1218 |
Section |
Loaded Modules:
| Path |
| C:\Windows\system32\CloudExperienceHostBroker.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
Signature
- Status: Signature verified.
- Serial:
33000001C422B2F79B793DACB20000000001C4
- Thumbprint:
AE9C1AE54763822EEC42474983D8B635116C8452
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: CloudExperienceHostBroker.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
MIT License. Copyright (c) 2020-2021 Strontic.