Ribbons.scr
- File Path:
C:\Windows\system32\Ribbons.scr
- Description: Ribbons Screen Saver
Screenshot
Hashes
Type | Hash |
---|---|
MD5 | 8B34A9DEA0F6040DE7CAA188DCDA8D98 |
SHA1 | 43C03B9F3F93F90B2B8BAA1715A7212986015502 |
SHA256 | D63666ACDA98473B4D97937DBD512DFD241C4603F08190B35FF1DA7431016FD1 |
SHA384 | 5528CA31111329CCF20A163B08E51C913AA6FE2C5D44E7CF7B55AC66E6C8A5DF4A087BC5AE2AE3EE9CCCA3397FA53FBB |
SHA512 | 41256FA6384BA69889886B69F8F31B86B1445ADACD695F2CD8F9604E29269FCDE9CBA24DCCA9BE540FE5D78542899BB8DABE50C748549894F55AE815049DE964 |
SSDEEP | 3072:tNHfFE24AOjbi6q/PKNp0LcOGefEDGJqP4yciLgj5L:RWXmXLG1JC5 |
IMP | E3EDD3408C26D0CB7273BC99781B3447 |
PESHA1 | 08FB127195B4A812E11CE3CE9F427A97696DE1F9 |
PE256 | E2A4AE1E0C246EC3A8DBFB3BAAFAAC3218F0DE5BFFBAAB9DF264D22B50EEFD05 |
Runtime Data
Window Title:
Ribbons
Open Handles:
Path | Type |
---|---|
(R-D) C:\Windows\System32\en-US\Ribbons.scr.mui | File |
(RW-) C:\Users\user | File |
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.746_none_ca02b4b61b8320a4 | File |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 | Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
\Sessions\1\Windows\Theme3205582532 | Section |
\Windows\Theme3800351183 | Section |
Loaded Modules:
Path |
---|
C:\Windows\System32\ADVAPI32.dll |
C:\Windows\System32\KERNEL32.DLL |
C:\Windows\System32\KERNELBASE.dll |
C:\Windows\System32\msvcrt.dll |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\system32\Ribbons.scr |
C:\Windows\System32\sechost.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: Ribbons
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/76
- VirusTotal Link: https://www.virustotal.com/gui/file/d63666acda98473b4d97937dbd512dfd241c4603f08190b35ff1da7431016fd1/detection
MIT License. Copyright (c) 2020-2021 Strontic.