HelpPane.exe

  • File Path: C:\Windows\HelpPane.exe
  • Description: Microsoft Help and Support

Hashes

Type Hash
MD5 9A6D44491772E8AA3EBDDC63C1CEF991
SHA1 2E5284A0574F5B17ADF2C5105DC0F598919BD92D
SHA256 587943F7A42FC21D636B3BAE0CAD17D66E9AA919F0689730A01A77035F7BD767
SHA384 AF7ED6366A9BE1C185896D69BD25FACA7D16699CF8E09030B26A20098568E740C2028AA234BE187AC32A6D4DEFFC26BB
SHA512 A1917A06606697EABBA0A73332DFAFD3CA7D44A0F3F5AE887AB0A5C219F49803A59F690FEE7F11BAB21435CAE57A28857366CC4CAFD76AF6FAF916C599F78675
SSDEEP 12288:VGoI5cF1qtS8e5QIjFAPWAlkS+ExyEXsXKPXPiXuHNHGb6bH/zx/GCLW/nh/X:E+qtSZJFA+ekS+El
IMP A71B59777FDF47EB06D8F9729F3BF423
PESHA1 9A9A7D8753F507DFCE0252DA29B378BD013B2F14
PE256 BBB63B5E1E12461C01D9CB302568385684FD72B6D1593CBC92BD6E77332A972B

Runtime Data

Loaded Modules:

Path
C:\Windows\HelpPane.exe
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: HelpPane.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/587943f7a42fc21d636b3bae0cad17d66e9aa919f0689730a01a77035f7bd767/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\HelpPane.exe 43
C:\WINDOWS\HelpPane.exe 61
C:\Windows\HelpPane.exe 57
C:\windows\HelpPane.exe 58
C:\Windows\HelpPane.exe 50
C:\Windows\HelpPane.exe 58

Possible Misuse

The following table contains possible examples of HelpPane.exe being misused. While HelpPane.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma win_user_driver_loaded.yml - '\Windows\HelpPane.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.