SppExtComObj.Exe

  • File Path: C:\WINDOWS\system32\SppExtComObj.Exe
  • Description: KMS Connection Broker

Hashes

Type Hash
MD5 400B0987406B28D447FC672ED7834CC0
SHA1 3B34D1624944A972E1983A7A9325E7C0C7D1AAB0
SHA256 EF1CBF6FF3CDE450E40DAC0DA5D285E6458CB850623A8E877AC052146D01715C
SHA384 73DD454F8621DCA257D22741E59DA1422CB7DF4B3BC80D399D5016FE37ACF79EC1B8CF2547955667829C333FFDCB8441
SHA512 989457F5C710F283FFE896828C6E4BFBD961CF7F47592BADD3EF6A350B0DDF25B641D072A9BDD03E156941D5A33F5C05DB9A977E091C35D0B4B0B43A3A135907
SSDEEP 12288:mrxFv9RmrDonLfh4jxnUsWWbN1duD9uHIQbwtZXh2:m1PR8cLZglUyNuJ/Xh
IMP F9AF459042AA460E4FB7D21AEBB77B93
PESHA1 73AA40A5D227093A0133A9B40CA1BF407B6DE9DA
PE256 105FCFABD319BFCE2533FB36ED6737035DAA26CE4BF882126A2FEC593419BDE3

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\SppExtComObj.Exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SppExtComObj.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.282 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.282
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/ef1cbf6ff3cde450e40dac0da5d285e6458cb850623a8e877ac052146d01715c/detection

MIT License. Copyright (c) 2020-2021 Strontic.