logagent.exe

  • File Path: C:\WINDOWS\system32\logagent.exe
  • Description: Windows Media Player Logagent

Hashes

Type Hash
MD5 D433540C8538C98DECDF092882043276
SHA1 8601967BB44FF4C607686A6251DDA69DC7927745
SHA256 FE4EF67C815B2C1EA7582AB2D1449C05F0ABEB9CFEE2B75736F27C9343ADD8A9
SHA384 D1AF9BDAD09947CDEB10AC32651CC01DF74C7E5481DC2685418ED694F61E747B52505B0CA821B2452E4F405CCB449A54
SHA512 86DA31BA4CB1F2C58CEDD0B4F0AB8A9B473D4B0EBEFECCB5087911E0F728DFA68B4D50A93AFA26EA39E5B48DB67540C3FC29F3F8519047C36F6FCA1FB78CDDFC
SSDEEP 1536:L3rTY0q1pwYGPGkX2nTltoOND1dMitAspZZKen//FooP5HR2+XoP6Dhje86TI0gB:rb9GkX2X//JdvBl5HR2JiDhjATNgwK
IMP B444F839D6BAA9CFFD50DE43E20AF8FE
PESHA1 3B47C4A53974BF8B52B22C7954860E63F7A31C92
PE256 030282AB3A15915E11B7F2E41670E3FD4C1D19F2FDA04EF9DED553D485423662

Runtime Data

Open Handles:

Path Type
(RW-) C:\Windows\System32 File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\logagent.exe
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: logagent.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 12.0.22000.1
  • Product Version: 12.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/fe4ef67c815b2c1ea7582ab2d1449c05f0abeb9cfee2b75736f27c9343add8a9/detection

MIT License. Copyright (c) 2020-2021 Strontic.