PerceptionSimulationService.exe

  • File Path: C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
  • Description: Windows Perception Simulation Service

Hashes

Type Hash
MD5 217DD189B66B68149ED4F7E8C9BA1DD9
SHA1 83CF7ED2C94AFA35D0C80B7B2EA8D6DA08F68285
SHA256 F4A1550BFEFBDC09DA82F53CE94EF3261C75DB1CC7C1EDD1074D31F828A47316
SHA384 8AB7C5351F723C07E543CEDEF353FB89AC56A7329DA167B6CF8949FF00E164E5718B8A7F4FF68CDCA30EE13E3624F948
SHA512 19AE23131AA4B8A59D8E9C8617D09BF8D3B904BA4A60637C682AA973C7347A1898FFC62E15E9928B7A6CD9434F5C2348D37FB010E5C3C15CE0DDD22D5715CADB
SSDEEP 1536:EhYUQ6etCLkKON716aGevVfk5wBNfi5VLKgljv3OFbOYEoMKVqgRHoB:JVmkpN7pFtfRBlieDjVqSHoB
IMP C2DE8C94325285248B02AD116C1FA4BE
PESHA1 94A77A3143071FC5C6F36EC4993DA98AB2461809
PE256 4FE5F0E1AC6A11B7C2D3148B68E6725BE6D9EC8862599B6FC90EC3B39C1F408D

Runtime Data

Usage (stdout):

Windows Perception Simulation Service.

PerceptionSimulation [/I][/U][/?]

    /I    Installs the "Windows Perception Simulation Service" Service.
    /U    Removes the "Windows Perception Simulation Service" Service.
    /?    Displays this help.

Unrecognized switch "--help"

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PerceptionSimulationService.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/f4a1550bfefbdc09da82f53ce94ef3261c75db1cc7c1edd1074d31f828a47316/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe 36

MIT License. Copyright (c) 2020-2021 Strontic.