msoadfsb.exe
- File Path:
C:\Program Files (x86)\Microsoft Office\root\Office16\msoadfsb.exe
- Description: Microsoft Office component
Hashes
| Type |
Hash |
| MD5 |
0453597A16F392F17824411D1AFF044C |
| SHA1 |
226E7E95201FF13B0DC7B3675A88A960F7AB0971 |
| SHA256 |
EA1C63E0D4A5AA14379908276B14208AA5B65E05D0339A54FBDD8CC1DF8EE21F |
| SHA384 |
C9973C8F46D5828336F262CA393CA69DC39B9AF71DBA3D626A39B6348A12D26BEC792345ABAD5F63F090B86DC1A1E24E |
| SHA512 |
542E6BCF9F3499CDE6A5FB97B2DCEB5135D1FEFD6BC65FAFE118B1A0232FCF1873BA1C7709BC1ED41BCC673E34C4C2C3551F1D979FB1BEF2E65E1FF5BBC6721C |
| SSDEEP |
24576:pDQRPO4e5TWpqRl8jL+cDORWbuqXgm5LC1BAZmTPQpbqne+S:RmPXMeqRGecDMWbuqXgmpC1BAoTPQN+S |
| IMP |
CE88FB248C0483F84367CFABC6859A1B |
| PESHA1 |
8B3507BAE3BB70F87125CB74B0FBFA426ADB8C73 |
| PE256 |
79C96664E404F1FEF2CF3C7220EA05491E4EF4BBA8ADB7B6C08ADDDBD946B765 |
Runtime Data
Open Handles:
| Path |
Type |
| (R–) C:\ProgramData\Microsoft\Office\ClickToRunPackageLocker |
File |
| (R-D) C:\Windows\System32\en-US\crypt32.dll.mui |
File |
| (RW-) C:\Users\user\Documents |
File |
| (RW-) C:\Windows |
File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 |
File |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
Loaded Modules:
| Path |
| C:\Program Files (x86)\Microsoft Office\root\Office16\msoadfsb.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
33000002CE7C9ACE7D905ED2B70000000002CE
- Thumbprint:
B10607FB914700B40F794610850C1DE0A21566C1
- Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: msoadfsb.exe
- Product Name: Microsoft Office
- Company Name: Microsoft Corporation
- File Version: 16.0.12527.20482
- Product Version: 16.0.12527.20482
- Language: Language Neutral
- Legal Copyright:
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/ea1c63e0d4a5aa14379908276b14208aa5b65e05d0339a54fbdd8cc1df8ee21f/detection/
MIT License. Copyright (c) 2020-2021 Strontic.