agentactivationruntimestarter.exe

File Path: C:\Windows\system32\agentactivationruntimestarter.exe

Hashes

Type	Hash
MD5	`B556B608D4B1D770EBAAFD23DECF1F88`
SHA1	`1BF317D77FD63483D812865925A3CEE81879193F`
SHA256	`CE2903AC725F5DCE0E2F658996132858FAAF14F2EEF18B28CDBA9CA807A21F77`
SHA384	`7E220976925C51D256607F6F9816040C706F0F24A2E6355BE8BA8F3D8BF8CE693DB61575366B77FF4202AA6E8529D1D2`
SHA512	`DCF4266FEE1EB592D27D78210DDACD4EE4E590F7EABE2D67CA80C6B1C917D0AA0675BB4C56AA873103E243F416C6D1F0597C3966B4146CC556FB48C096DD442A`
SSDEEP	`192:wKcdVHZqzn/3dbd3380z/hDU48AoAvclD2eFZp/sBJGTZ6lEo6Uc7EN:2dVH8Tdbx8ExPvt0lD1KHMUc7`
IMP	`9FF2CEFB944FB06F3C5F295C519519AE`
PESHA1	`05082B9E6450F6B26B79DCB81071BC757F3EAF07`
PE256	`A4FA071A27CBF127A8B7D2638A899540D12738165708C86A5647CA85B4AF9387`

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\agentactivationruntimestarter.exe
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\msvcp110_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/76
VirusTotal Link: https://www.virustotal.com/gui/file/ce2903ac725f5dce0e2f658996132858faaf14f2eef18b28cdba9ca807a21f77/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\agentactivationruntimestarter.exe	80
C:\Windows\system32\agentactivationruntimestarter.exe	94
C:\Windows\system32\agentactivationruntimestarter.exe	93

MIT License. Copyright (c) 2020-2021 Strontic.