agentactivationruntimestarter.exe

File Path: C:\Windows\system32\agentactivationruntimestarter.exe

Hashes

Type	Hash
MD5	`3AF89FB569117419503CC276BBC1A660`
SHA1	`41A97E9B7539127A8D513C36A3F683E2E5968437`
SHA256	`DE238C935519F2BCCDEB8DBFF975CDE9F8B7A7FA64B81608736FC764FF210547`
SHA384	`353AE2CE38E998C1BEB5DD3AAB338593D6DCE5890132D72D1B141DF95910D8689EBA033BA228E861027B227EACE71E76`
SHA512	`98BEE887E7AC5117C1136F5026B5A319AA18188F55AD01BBA66B996B1A002BA0AC77701D768DAD4E1374A856984A8A0BCD7C6D3094AF83EB02AEFC57A6FE5E4D`
SSDEEP	`192:wXstVHZqzn/3dbd3380z/hDU48AoAvcmC2veFHpqcTJGTZ6lEo6UcY0:3tVH8Tdbx8ExPvt0mClhHMUcY`
IMP	`9FF2CEFB944FB06F3C5F295C519519AE`
PESHA1	`9C1D24A71C5D62230A365C2E9EFDB0922FCAB7DE`
PE256	`3D06451A909D603E0D9ED64F639AD7AF932DD4CD129E2DC03B73D555F3F4CB83`

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\agentactivationruntimestarter.exe
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\msvcp110_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/68
VirusTotal Link: https://www.virustotal.com/gui/file/de238c935519f2bccdeb8dbff975cde9f8b7a7fa64b81608736fc764ff210547/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\agentactivationruntimestarter.exe	75
C:\Windows\system32\agentactivationruntimestarter.exe	74
C:\Windows\system32\agentactivationruntimestarter.exe	80

MIT License. Copyright (c) 2020-2021 Strontic.