provlaunch.exe
- File Path:
C:\WINDOWS\system32\provlaunch.exe
- Description: Provisioning package runtime command launching tool
Hashes
| Type |
Hash |
| MD5 |
BA2CA9C5AAFD54A0C36DAF2E82F3BCF9 |
| SHA1 |
BFBE5CA106FC3CE3153A2A094F4A566EB8F7DDC5 |
| SHA256 |
C868B2CD314031DFB46903E56CB38D5D45C203A9AEB662D4F1B777F46450FE4D |
| SHA384 |
2A06EE955B38CF71A827A95DF9A30033A166956D12D6D92DF45DCE0F9E4D6F4FD60C963FDC232640DB3A901C0FA513E7 |
| SHA512 |
2C3758DB82F7EAF233CC1E850BF546F1EFC0579B2B0A3ED743D14927A1EE206AE3421D016A914887A78716CE38D8FD756C7BB92FB56A4286A523106B1F6DB228 |
| SSDEEP |
1536:ciN822u8bUCXXamnpCTe2Lk0z5eHWEc51lv0QFCe9V48qoAfYXytTnNJP6:ciNp2uo3xph2bX7LVHq7YXytTnfP6 |
| IMP |
5E2BD8BDC63E61F7E0D77C0B742A3DC3 |
| PESHA1 |
4FDA3A3EB1C5BF6A56761E5CFD5729D354F971DF |
| PE256 |
837432BD5E5977B14AC0BEC7D4FE99BCE9C32E6BF245973EAE312EEC83CE339B |
Runtime Data
Loaded Modules:
| Path |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\system32\provlaunch.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: provlaunch
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/71
- VirusTotal Link: https://www.virustotal.com/gui/file/c868b2cd314031dfb46903e56cb38d5d45c203a9aeb662d4f1b777f46450fe4d/detection
MIT License. Copyright (c) 2020-2021 Strontic.