UIMgrBroker.exe

  • File Path: C:\Windows\system32\UIMgrBroker.exe
  • Description: Microsoft UIManager Broker

Hashes

Type Hash
MD5 B0D3EEB36512235D76B00F883DA3C231
SHA1 B3CF26D0DEF2B20DE4F05571EBC8A093D926E089
SHA256 B09DCFEDBB4A4F39A0F0D854D20842123DE9D75163821DDBDDC9AC4E149A2FDB
SHA384 E355C1761E05B546A9B3EB2E9B450A79EC7ACFD4CA075C72F82B9E324DD063EA8096011E81D90C2B1FD13586C1FC5B92
SHA512 D5C77EA12A8C4EB0D69422C4F20F3279194EAE9F28F027C3A6CDF9C5AE0149F6181CCD58B032C379DDF8DF87EAB7D5DA1F8BAB77303A4768382066B7E2BF6F7F
SSDEEP 768:5fc7opvzYTqQfm9wIRviJbsRvPVPZ1MUl/CEkAf9Fq8LkQBPWB9iNz:yoEqQoMJbWH/SUgef9Fq32PWB9Mz
IMP 68B9DCA137FA8179CE80445E610B5C16
PESHA1 10E7792B7378A0DE48395D99672F60AA575958A4
PE256 83F7298E1C40902E9230B5D71833462DE3E96DFD072CA5FB5D0ACFF8CA5E06F9

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\cfgmgr32.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\cryptsp.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\powrprof.dll
C:\Windows\System32\profapi.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\shlwapi.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\UIMgrBroker.exe
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll
C:\Windows\System32\windows.storage.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UIMgrBroker.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1339 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1339
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/b09dcfedbb4a4f39a0f0d854d20842123de9d75163821ddbddc9ac4e149a2fdb/detection/

MIT License. Copyright (c) 2020-2021 Strontic.