phoneactivate.exe

  • File Path: C:\Windows\system32\phoneactivate.exe
  • Description: Phone Activation UI

Screenshot

phoneactivate.exe

Hashes

Type Hash
MD5 6E220F994F09387091CD1BCFA94F7B89
SHA1 E50F7FE14C7676378B7F3E23B03E29E94BFC51DD
SHA256 4325652E762C5BA53C48752373AA2ECA1CA0F91C19E826160FC9B195E1D5E70A
SHA384 99005B730A495752C35D05EB4D966E0D7106C8812A7C9D356093D64686EE9E444FDD2B61E2A63CEC31E3106DBDA79456
SHA512 2BD7EC2881063DDADE77A62F6AC0A046DA902F1615722EEE9F7C1324E3F7EB0881B121319D7E78A393A4832E041F25AD49ADFD7149BC741F18B1B935EA3FE637
SSDEEP 1536:/sZvXjZKYkNj0aiqlm/2WB/dT7j5vpEdkrE3vrWUg6niZA2tjyJVWPCl:UhFLCXtg/dSkrN6niW2Cgql
IMP DA01ABA632042A34353C786F41878181
PESHA1 BC774D896B095DF4322EECFE204DE49393953169
PE256 49922CCBD9BD33B3D3AF815B156AAAEFE554EED841D70185BCBE726D72C95B67

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\cfgmgr32.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\system32\phoneactivate.exe
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\SETUPAPI.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\SHLWAPI.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll
C:\Windows\system32\Windows.UI.Immersive.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: phoneactivate.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/4325652e762c5ba53c48752373aa2eca1ca0f91c19e826160fc9b195e1d5e70a/detection

MIT License. Copyright (c) 2020-2021 Strontic.