RunLegacyCPLElevated.exe

  • File Path: C:\WINDOWS\system32\RunLegacyCPLElevated.exe
  • Description: Run a legacy CPL elevated

Hashes

Type Hash
MD5 88C2C65B3CAAEA8E424921E4A987E522
SHA1 EC3E1D1FB3EEE37591AE0D58C664D02A78231730
SHA256 A5D2822A9320BA090196051684054BF7F30ABC42D8E0C95B9AA0800A30BB1CAC
SHA384 1C07598545A5AE22CDE618BA36B6906BF171E650FF23D84E3E951F77015B6B90684502A2D5242D227AE81F732FF08A70
SHA512 8AFEEFC34D7FFDF0895C5E26607E39D81D073BBE5909DA5DB45596E4096AD0BF355848D85017D7533331B922ACC0D6952D5605FBFCDECAEEC3C01904C813EBEE
SSDEEP 1536:Pudc6rZCoC1ksGyYHAxakkn6oYY0ewiP8:GegzC1nWAxaJVYYPwi

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: RunLegacyCPLElevated.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\RunLegacyCPLElevated.exe 65
C:\Windows\system32\RunLegacyCPLElevated.exe 57
C:\Windows\system32\RunLegacyCPLElevated.exe 58
C:\windows\system32\RunLegacyCPLElevated.exe 63
C:\Windows\system32\winver.exe 63
C:\Windows\system32\winver.exe 63
C:\Windows\system32\winver.exe 57
C:\WINDOWS\system32\winver.exe 58
C:\windows\system32\winver.exe 60
C:\Windows\SysWOW64\RunLegacyCPLElevated.exe 60
C:\Windows\SysWOW64\RunLegacyCPLElevated.exe 58
C:\windows\SysWOW64\RunLegacyCPLElevated.exe 61
C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe 65
C:\Windows\SysWOW64\RunLegacyCPLElevated.exe 57
C:\windows\SysWOW64\winver.exe 60
C:\Windows\SysWOW64\winver.exe 60
C:\Windows\SysWOW64\winver.exe 65
C:\WINDOWS\SysWOW64\winver.exe 60
C:\Windows\SysWOW64\winver.exe 58

MIT License. Copyright (c) 2020-2021 Strontic.