pospaymentsworker.exe
- File Path:
C:\Windows\system32\pospaymentsworker.exe
Hashes
Type |
Hash |
MD5 |
7700A1F5ECACFB07A92C5960448AFAB8 |
SHA1 |
2547845243FF409F8FBC56474AE1D796B558F010 |
SHA256 |
43E3FCB7A777C62D02CB359452C488E114D8DA9F9FFA7854ECFB5CD236B9377F |
SHA384 |
9448A49193C8E5CBDC6B52BB70853EDD0857E1357E309894B799E8D8AA07871ACC09012A7E46BB60D6387E1951F7B53D |
SHA512 |
B8832E18B99065CB5BF251BC93E944033FF5BC50EA68120383EA51075A47C0D65C3506E2BFCEAABCECCD8F0D7E407EEE8327311D9A3534A85B422E4354754549 |
SSDEEP |
768:QENcs7AUREojUerIG9HPLR4chodK5bYL6qEcloLgsP8VwcQJn97w9sGFeor:9nREojUerIG9xh75u6+TVwznF6TFeo |
IMP |
C06E0C121412B612B774C1FB7D21710A |
PESHA1 |
481720CB23486C75590B80E06F4C2B7DA08ED122 |
PE256 |
9350C55D53355F9438A50D9625E5DE7210A7D9277907D5D8548655D6B515422C |
Runtime Data
Loaded Modules:
Path |
C:\Windows\System32\combase.dll |
C:\Windows\System32\KERNEL32.DLL |
C:\Windows\System32\KERNELBASE.dll |
C:\Windows\System32\msvcp_win.dll |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\system32\pospaymentsworker.exe |
C:\Windows\System32\RPCRT4.dll |
C:\Windows\System32\ucrtbase.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename:
- Product Name:
- Company Name:
- File Version:
- Product Version:
- Language:
- Legal Copyright:
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/43e3fcb7a777c62d02cb359452c488e114d8da9f9ffa7854ecfb5cd236b9377f/detection
MIT License. Copyright (c) 2020-2021 Strontic.