fontdrvhost.exe

File Path: C:\Windows\system32\fontdrvhost.exe
Description: Usermode Font Driver Host

Hashes

Type	Hash
MD5	`0C8E349080DA14306299593837A44792`
SHA1	`5E02D55288422CDCEEE3E56CF080E6D6D8516130`
SHA256	`78FC107E194699C39A62373670C1F51B60C936EC1ABB79A4C638B57409BE15E9`
SHA384	`B1817040CFB6600974F98F87DF76F65422A8ABEF78A60CEBAD01FC21EA35CFCB2FA8A6B6D8D23B4B93990AA7391B1F4F`
SHA512	`11DD2CF35B9E1A6504198CC87731B6B416CEC0D6CEFD78D2DD058D70E3D972FCC4F5D400D2AC5C79B15D31965664FD1A52B02ECC00E2F9102653AB895CADDE6F`
SSDEEP	`12288:MWsGAPmwi3jxD7C9J7Bbq4okigf53/f7KdPLUMnwoFEfrQkgQ3khaZevrWAK:uGA+wKm7B24w4/OpVFEfr5nkhnzWAK`
IMP	`63D92DE7493486079808C072D6146F10`
PESHA1	`78F2ED235AF96B5C0F04924DE868FBD6200BFFE1`
PE256	`2E9D987E7F6CBD16DC8EF4F1664FAB4AD04ACB93F19599EC58550ACD69C5399E`

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\fontdrvhost.exe
C:\Windows\SYSTEM32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\win32u.dll

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: fontdrvhost.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1320 (WinBuild.160101.0800)
Product Version: 10.0.19041.1320
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/78fc107e194699c39a62373670c1f51b60c936ec1abb79a4c638b57409be15e9/detection

MIT License. Copyright (c) 2020-2021 Strontic.