ScreenClippingHost.exe
- File Path:
C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClippingHost.exe
Hashes
Type |
Hash |
MD5 |
7140BCF8EAE58E7A63CF167B866402DA |
SHA1 |
03F8D2FEBF1AD5E0EF491FB1D52783701D9EE980 |
SHA256 |
ED515CF87808AD93030392B074687C32E56238A9412BF981AF31B3C0C33D6576 |
SHA384 |
8ED760D36511EC59F5D6D54BEEB432A103083DBE0502E3D9A58DF2E13DBF2E3B8EF474DE66522209DF17C7E47C9A5104 |
SHA512 |
604A30469D3CE4820A79319C7CCDF331E72D9B8097F4C352C6FAEBD4498A463D337E6EAEE02BF6541B799463A3D93D6E44C269A75EAB6A5189F6AF3C29348E54 |
SSDEEP |
192:os6D+E0TmG78LqfpO59yWzHWnHZER+0QhXbYDBQABJO4EHsqnajKspuq:R6JRGwmmyWzHWnONWMDBRJO4UslGspX |
IMP |
44C701AD782D9785365B6D8072B898C8 |
PESHA1 |
B6B2F7921BFCF6D75844F9A347AA96CD6055A44A |
PE256 |
977C5E462E413433EA566370BE52FB12B0335B0FA5831137E6277447E5D5753E |
Runtime Data
Loaded Modules:
Path |
C:\WINDOWS\System32\combase.dll |
C:\WINDOWS\System32\KERNEL32.DLL |
C:\WINDOWS\System32\KERNELBASE.dll |
C:\WINDOWS\SYSTEM32\ntdll.dll |
C:\WINDOWS\System32\ucrtbase.dll |
C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClippingHost.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: ScreenClippingHost.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 421.19500.0.0
- Product Version: 421.19500.0.0
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/ed515cf87808ad93030392b074687c32e56238a9412bf981af31b3c0c33d6576/detection
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.