ofdeploy.exe

  • File Path: C:\Windows\system32\ofdeploy.exe
  • Description: Office Deployment

Hashes

Type Hash
MD5 40BC93680AA1315E68C7DF7D739C6C14
SHA1 0489D57B8A6AF52ECCBCE46E3751AAB2709EBF38
SHA256 2E109B87AED87AF5DBFD00FF1DE4F577CFCA7A652C74520BF363CF192B0FA693
SHA384 B4809AD97AF55D93D7C1CF3941CCE568C73C4702B0E56FC9C30023D98F5835B7AE27516DD587AA2F058B7F9D0FB02631
SHA512 3A884BA40C1646B9BDD70CC086C4A054022EF67C7429804A461BD8F16C067130C3CE49DDE98029743904AD7AD4D4055ADB2C2D4214BBFA2B7E007157F2F2EB57
SSDEEP 1536:aq/nc8tR7+DgBpcaFS+WYxPXH+gy3+sFssssmbTVPyN+LNaWBQw:Xnce3FS+WYxGdQF9LN/R
IMP 59D8EDDB0EFA26A12F88FAD57CBED731
PESHA1 3BF71D76427E1043B90E8E9D6CDF93F83E37C2CE
PE256 7DF9F51737F5D96FF771F8ECC01E33EA639A6C908C9003E40DFC9CFC2DAE5B4F

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\ofdeploy.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: OFDEPLOY.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.844
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/2e109b87aed87af5dbfd00ff1de4f577cfca7a652c74520bf363cf192b0fa693/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\ofdeploy.exe 32
C:\WINDOWS\system32\ofdeploy.exe 32
C:\Windows\system32\ofdeploy.exe 40

MIT License. Copyright (c) 2020-2021 Strontic.