TextInputHost.exe

  • File Path: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe

Hashes

Type Hash
MD5 090C77C5426E84F8B39044C37152FA64
SHA1 4B9FAC8F6F517D0B685D8303BA36A98363E59BCE
SHA256 C480752FBA0E9DAF476B548248A47A2C6BF14F3DE8045945FBEE9F9E92A7B41A
SHA384 B289BBC2A89466A176796C2C701563CEB20D233B2C2539D9EB42FE1F8AB79CC1A86591E9AFCDD2BB5C1DA5414941917A
SHA512 4D9BC5B5F0B4DB34E18DBA03CB0988A75A73F9A5C2D267307AD9C0F9CDA05AD4DF48FD712D14B1D95F82D0F11FD0BAAA53B23B4A099BDEE005DE4A0947705F53
SSDEEP 192:CaTuvZF9lmuNPsQRMJoO5H1WOGWbNp3qA/DBQABJs9mihqnajygfE:CaAZF/FPxH41WOGWbn/DBRJs9fleg8
IMP 8ACCE29A751A218EBBCA39B834A66F0B
PESHA1 58A8236E067D35919FF69A52BFD1B97D43F03F50
PE256 EA56B9F41E04E89E46A98E041F0C8B0D14003E12307DA76F5FDC6126422369EA

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TextInputHost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 2001.22012.0.31
  • Product Version: 2001.22012.0.31
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/c480752fba0e9daf476b548248a47a2c6bf14f3de8045945fbee9f9e92a7b41a/detection

File Similarity (ssdeep match)

File Score
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClipping\ScreenClippingHost.exe 50

MIT License. Copyright (c) 2020-2021 Strontic.