WorkFolders.exe

  • File Path: C:\WINDOWS\system32\WorkFolders.exe
  • Description: Work Folders

Hashes

Type Hash
MD5 E981562DBC7E8680D21EF6F78ED91006
SHA1 E800E6A7186B97D72004171A427869F97E6D1F4C
SHA256 A4ED29118F6A9C15A16668161BCC872C4785D76F68144B57D2FE1011EC4764B6
SHA384 4BED9FD2D32A23A018B57A173BFFEFF51E4AAACF076D026C5E762EC0E901C8B11ABFF0A370A8EA5284CA2D8D0C0B92B8
SHA512 CC5B782DC7D9BC058E86E993207A45660436279D694A5425FE18C2CA58B6E3409C566D047CADE4BBB9E328A1775ED59C1F065D6BFE892F75171E352F144370ED
SSDEEP 1536:l2QTk0Va3gfCVMrS7rF+VlCaIm1wisw/8cxEa:lbTRZ6ZPF+VlCaIm1Uw0cxE

Runtime Data

Child Processes:

control.exe

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WorkFolders.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.778 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.778
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\WorkFolders.exe 57
C:\Windows\system32\WorkFoldersRes.dll 55
C:\Windows\SysWOW64\WorkFoldersRes.dll 55

MIT License. Copyright (c) 2020-2021 Strontic.