DTUHandler.exe

  • File Path: C:\Windows\system32\DTUHandler.exe
  • Description: DTUHandler

Hashes

Type Hash
MD5 2190B4CD9D51F319ED6D40AB133085B5
SHA1 C6F63FB2A7728122A88B7A618C69A3497D25D027
SHA256 364B839CBAFC47942A04C05FBC8C0D96C5AA381FFE1FC60F26D429F7C5FFAA94
SHA384 6CC9E473B6EB178DFAF04BD0159BE83DB7D770074C2CAE9EC281F7F2522667967B0BE6D8706C1128DC67264652E18D0F
SHA512 242A2B66CD1EE6E24D6AE73D2062CAFA39BEC13277C97359E11431E4A82E130C282F591541EF536812BBF10E787C0B49E8AD2312F4D826E456799EE2CCCFE571
SSDEEP 3072:o5T1oQieG8KMnjCmTxtuE1Tm9OLzh4bJurJ/pJyeoHpMjCDtamBZguNnYwhNMLWJ:ot1oQNGxMmmTx4E1TCDtamBZguNMLWgy
IMP D6A23E2DBCECC3A6B227BCA1AC686B59
PESHA1 4DC6601D33D2519E10FD64B0A284A1DE56D7FD91
PE256 7C5CE819D46F4B52E6FC0A4A16C95CC5FC8CEBCA5EEA97F84E53DE641107BCB9

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\combase.dll
C:\Windows\system32\DTUHandler.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DTUHandler.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.844 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.844
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/364b839cbafc47942a04c05fbc8c0d96c5aa381ffe1fc60f26d429f7c5ffaa94/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\DTUHandler.exe 54
C:\WINDOWS\system32\DTUHandler.exe 54

MIT License. Copyright (c) 2020-2021 Strontic.