WallpaperHost.exe

File Path: C:\Windows\system32\WallpaperHost.exe
Description: Wallpaper Host Process

Hashes

Type	Hash
MD5	`37DFAA45EA5706964A01AF082B831BDA`
SHA1	`C14E27C3A8EC356FE239FE0238E0C8B42132EEE2`
SHA256	`D3CF86E66420B2DA75B0BE38FA78FD8E41F01AD827F9D5EEBDA59182D394968C`
SHA384	`64BA9AD9BFF08FF7EB533AC609C011EFBF76C043F97F7F852F1A063325A246E2E96FFF9D432CA72F5507921FAD4A79AE`
SHA512	`40CA4E5014D9FCA3569823C139309CE2D7871054F1A7D875125D6E447A8439DE56BCA801416EE7C1AC2A4579151E5D07842EE52D04DA80EC7D6BAAF3C6406550`
SSDEEP	`384:n+Yx9hgLjTEWKIoGtxi5wZkTgEfJ7y7xUietlChvCauuphNvUhytTbWK0FW2:Xx9GLjT7tUAkEEfJ7y7xheDCtCuZvUhV`
IMP	`A1F991B4FDC56F63965DBE7640A1BE21`
PESHA1	`D642F9E709ADE1206D139287CBA4AC7C13583B8B`
PE256	`D1E980CB4ED1AB895C7484B488D8EAE8D9F3F295F417C44AC6D2A54230C534BB`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\WallpaperHost.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WallpaperHost.EXE
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/74
VirusTotal Link: https://www.virustotal.com/gui/file/d3cf86e66420b2da75b0be38fa78fd8e41f01ad827f9d5eebda59182d394968c/detection

MIT License. Copyright (c) 2020-2021 Strontic.