SystemSettingsAdminFlows.exe
- File Path:
C:\Windows\system32\SystemSettingsAdminFlows.exe - Description: Settings
Hashes
| Type | Hash |
|---|---|
| MD5 | DAB5D8C43AD5FC042037E7E62C449EF9 |
| SHA1 | E3FA091A3CE4A4E683A4D63248B842445175FDD4 |
| SHA256 | 72D72F950FB618710F91DA59361CF4B8B6BB703610EFB5DA2501987A28FFFC84 |
| SHA384 | CF55E8546D49F566F385879E0B08B43D7E9E500DE54576BB36DBE5A48449ECA3F96B95F0F3CBA65B85D28D429FF03C8C |
| SHA512 | 68F5BF395BCF58F98C49F6D660B3DF14180ACD79A7D59419211329C9CA5AEEB1BC3D3DD2809BE80CBD4C4611EFF2119EC9F85A649A6CFA6DC4B98C0E2ED84045 |
| SSDEEP | 6144:rgiF6uqHtSJ4km5flEsHFlrMeWpUeIW5A2VJov+ZPyq1ywPu8nkiNjtN2:MiF9ItFk6l1H3rMzeeBHZPtwC7jtU |
| IMP | C6531DFED34A54D8246E693AE49F54F8 |
| PESHA1 | 5A5039D2F3EFE9FA0CE6486ED43FB68DA82F8D33 |
| PE256 | 2F55472D56E92E80407DC30B945AB1161F6EDCDE18EF021C916280912CF25C08 |
Runtime Data
Child Processes:
explorer.exe
Loaded Modules:
| Path |
|---|
| C:\Windows\System32\advapi32.dll |
| C:\Windows\system32\AppXDeploymentClient.dll |
| C:\Windows\System32\bcrypt.dll |
| C:\Windows\System32\cfgmgr32.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\CRYPT32.dll |
| C:\Windows\system32\DismApi.DLL |
| C:\Windows\system32\DNSAPI.dll |
| C:\Windows\system32\DUI70.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\system32\netutils.dll |
| C:\Windows\system32\newdev.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\ole32.dll |
| C:\Windows\System32\OLEAUT32.dll |
| C:\Windows\system32\PROPSYS.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\system32\samcli.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\SETUPAPI.dll |
| C:\Windows\System32\SHCORE.dll |
| C:\Windows\System32\SHELL32.dll |
| C:\Windows\System32\SHLWAPI.dll |
| C:\Windows\system32\SspiCli.dll |
| C:\Windows\system32\SystemSettingsAdminFlows.exe |
| C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\System32\win32u.dll |
| C:\Windows\system32\WINBRAND.dll |
| C:\Windows\system32\wincorlib.DLL |
| C:\Windows\system32\wkscli.dll |
| C:\Windows\system32\WTSAPI32.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266 - Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: SystemSettingsAdminFlows.EXE.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/72d72f950fb618710f91da59361cf4b8b6bb703610efb5da2501987a28fffc84/detection
MIT License. Copyright (c) 2020-2021 Strontic.