UsoClient.exe

  • File Path: C:\Windows\system32\UsoClient.exe
  • Description: UsoClient

Hashes

Type Hash
MD5 5BD4BF976E6F871AEF322D32FBA31BD5
SHA1 21A4540CEE7003D0CC9B04694D5FEB8283C901AE
SHA256 13B3C382AB9865163945FC0912FFB56CD49A8AAEB4A1235B05EB3EDD62726B04
SHA384 73D82F8185F7708805554203308DB2927928FD2F124EF24FE23D04BE75CAAD4EB3B161E5F81D6AB2EE21CE2DBEC01DD6
SHA512 7C49A761C30EA030B4A65D66C6B5164C31F966149DE225BA31C7E06FB3F09086331A7C011E087933FAA6D4B8660A3055489DC7654279B029CC7C56621F7E53CA
SSDEEP 1536:l/AysBEdAYSMbwg/Wm5PjNKZEYOeiDUY9uJSuZpOYxr75fxe7Eoa04:6ByS53SjNKZETeiDUbJSuzrxrF5e7Eo2
IMP 208F065ACB93BA3D82E648BAA58D7553
PESHA1 73D2583ACE4BA2ED6E8CC17D9787532DF41F22C6
PE256 0E42A585D17D351DFC74BD22F678FB080A227429C6F03A64DF4109AFD3A8DCFE

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\UsoClient.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UsoClient
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1266 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1266
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/13b3c382ab9865163945fc0912ffb56cd49a8aaeb4a1235b05eb3edd62726b04/detection

MIT License. Copyright (c) 2020-2021 Strontic.