pospaymentsworker.exe

  • File Path: C:\Windows\system32\pospaymentsworker.exe

Hashes

Type Hash
MD5 7700A1F5ECACFB07A92C5960448AFAB8
SHA1 2547845243FF409F8FBC56474AE1D796B558F010
SHA256 43E3FCB7A777C62D02CB359452C488E114D8DA9F9FFA7854ECFB5CD236B9377F
SHA384 9448A49193C8E5CBDC6B52BB70853EDD0857E1357E309894B799E8D8AA07871ACC09012A7E46BB60D6387E1951F7B53D
SHA512 B8832E18B99065CB5BF251BC93E944033FF5BC50EA68120383EA51075A47C0D65C3506E2BFCEAABCECCD8F0D7E407EEE8327311D9A3534A85B422E4354754549
SSDEEP 768:QENcs7AUREojUerIG9HPLR4chodK5bYL6qEcloLgsP8VwcQJn97w9sGFeor:9nREojUerIG9xh75u6+TVwznF6TFeo
IMP C06E0C121412B612B774C1FB7D21710A
PESHA1 481720CB23486C75590B80E06F4C2B7DA08ED122
PE256 9350C55D53355F9438A50D9625E5DE7210A7D9277907D5D8548655D6B515422C

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\pospaymentsworker.exe
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename:
  • Product Name:
  • Company Name:
  • File Version:
  • Product Version:
  • Language:
  • Legal Copyright:
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/43e3fcb7a777c62d02cb359452c488e114d8da9f9ffa7854ecfb5cd236b9377f/detection

MIT License. Copyright (c) 2020-2021 Strontic.