SppExtComObj.Exe

  • File Path: C:\Windows\system32\SppExtComObj.Exe
  • Description: KMS Connection Broker

Hashes

Type Hash
MD5 728A78909AA69CA0E976E94482350700
SHA1 6508DFCBF37DF25CAE8AE68CF1FCD4B78084ABB7
SHA256 2A6581576305771044F07EA0FEF27F77859996DBF66C2017E938F90BFC1E010C
SHA384 CB821C394CED41D17133E35A2B49F754F6101086EB66ADC280359149B68BC3FB4D1C5CDBC4D918612F1F62708E089B18
SHA512 22BF985E71AFA58A1365CC733C0AA03DABD4B44E7C6A136EB5F9B870DB14470201B4EF88A19FA3864AF6C44E79E1A01D6F8806062D9D4861BA7DAC77D82074F1
SSDEEP 12288:NyoBXlQ2Uu47gFeOHgskuzvABNK7PCxIZLx59kIQbwjX2m:NzK2U/EFPPxzv2N4PCxe
IMP 4C96B0E079D994B8689C66F7872425EB
PESHA1 C431BB9606C2215799654DEC1400B43C39A75500
PE256 FB7EC95958DFFF42DF0D385CE3540DDD88D4EF36144F033D5BDE0D55BF0B8B9E

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\system32\SppExtComObj.Exe
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SppExtComObj.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1202 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1202
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/2a6581576305771044f07ea0fef27f77859996dbf66c2017e938f90bfc1e010c/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\SppExtComObj.Exe 82

MIT License. Copyright (c) 2020-2021 Strontic.