dllhst3g.exe

File Path: C:\Windows\system32\dllhst3g.exe
Description: COM Surrogate

Hashes

Type	Hash
MD5	`E4208ACA399EC8C0AD48B05960F7FA9D`
SHA1	`BC85DBAD1A7BEF476AA5D41BC9884515506C53A6`
SHA256	`360E11757029F102BF9DEFAF60B24F96A8C4B6726C0B9EC9ECE4BBAE89F3AF7B`
SHA384	`9F0E74A3FC5ED5621A2C9DEA600C459D4D415FF4F9C5083C68B31D9693435E573E4C5D11386E7B48A925F765FA1D9ECD`
SHA512	`4796606D6D61A93894E033BBE23FA9F6C05D72F433B4522F3E10A0D71A7AE7BEEBFB8CB00F78DAA9A6F6881BE58EE82B5336B82C98DD6A3C11BDBC90CFE3B019`
SSDEEP	`192:f1CJDNbj7tYacksOgasl96c/xPhu9ai5uTEDcw8AW5yW:wJRXcksOqHMcFAW5yW`
IMP	`CF79FCE90FCED31836373F3E48251A5D`
PESHA1	`7E2DA07D0CDB540428FDEC0A26080B108A4820DF`
PE256	`08EC9AF7DF4FEF3477FDAF42B7DBB1072849938D7404BA4B9BC9F85A090CED82`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\system32\dllhst3g.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: dllhst3g.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/74
VirusTotal Link: https://www.virustotal.com/gui/file/360e11757029f102bf9defaf60b24f96a8c4b6726c0b9ec9ece4bbae89f3af7b/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\dllhost.exe	41
C:\Windows\system32\dllhost.exe	41

MIT License. Copyright (c) 2020-2021 Strontic.