easinvoker.exe

  • File Path: C:\WINDOWS\system32\easinvoker.exe
  • Description: Exchange ActiveSync Invoker

Hashes

Type Hash
MD5 063FAEF9D9673C617502727B7BCDA8BE
SHA1 D83C926C3A24FCBBBA83E1A37145C12CA2628BE1
SHA256 5E9D60A425ED50DC587AFB886DBCEFF941F0C7D0D1C597ED5E272B3DCF1032AA
SHA384 7B13338CB4D9DA6C0412624444F4C1522E0FAFA3767DFB759DC71AB7ACF42D4B692D32FFBD9E15E3C2B5D966C5F3BD24
SHA512 AAAA919657D3A2711FEB3C0485168AB02306272DB2D7B19D8BB4435BD6A4B5B3F2533AD4D365DAE06C9387976131BEE4DAA6F1EEF2F59CC2FC513BD5D0ABF36E
SSDEEP 1536:E9CbP3/FW3nS4pX0B7oazHuu2xXibswbTYkjULfrTSXPE:EEbP3/Q3NpX0R/zHuu2xXibswbjjUjv+
IMP 3E94CCB6E60FC118DB0D61A5306C8825
PESHA1 DDF0670FCE316FE13A50EECD6E67DFC2CB95E64C
PE256 D4CD00C157AEBA7CBB734515306B637DB7AB5AB7815BCE1E1553F2B9A364DE0E

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\system32\easinvoker.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: easinvoker.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/5e9d60a425ed50dc587afb886dbceff941f0c7d0d1c597ed5e272b3dcf1032aa/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\easinvoker.exe 44
C:\Windows\system32\easinvoker.exe 40
C:\WINDOWS\system32\easinvoker.exe 43

MIT License. Copyright (c) 2020-2021 Strontic.