msoobe.exe

  • File Path: C:\Windows\system32\oobe\msoobe.exe
  • Description: MSOOBE EXE

Screenshot

msoobe.exe

Hashes

Type Hash
MD5 0734753BEEF559409863B8AC99A2ABA4
SHA1 D3E54C510D145DD14DB8845F71A03D3920CE5A78
SHA256 640749AFC382ACB9A6E03F077F0E31A42BBB82C7E76F3A25E4ADDB14D16AB55B
SHA384 305C6345F900B5DF0ED67153C19469FD39C232E33390FBC94E9FE02AC595D52DCA934A10C03E51E950F3A09D345C2A26
SHA512 28C7F88931537F4ED9BD61815BD0A7641083BCD927A75F39B78A98C4C71E42BE552732CF0B6491A2CE58CFE7B58A0F8BB2425D5D0FEB8002A68A6ADDD07A081A
SSDEEP 3072:sWInMsOfr73/HSlYzaTVv0s0kuby67CuHznNB2Q3+MdAVOxn+dZq:sWInMBjb/Hpksd/HzNJ3tdj+dZ
IMP AB801A82AEA92BE7ED425A39E0598BD6
PESHA1 24E12E8485082D6DD23EE7C80AEBE6D3ACE911A5
PE256 434EAA13359850232C446FFAAF17FD3569D4D6FCADD016DDA28F99DC8EC5CA37

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\oobe\msoobe.exe
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: msoobe.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1266 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1266
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/640749afc382acb9a6e03f077f0e31a42bbb82c7e76f3a25e4addb14d16ab55b/detection

MIT License. Copyright (c) 2020-2021 Strontic.