rc.exe
- File Path:
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\rc.exe - Description: Microsoft Resource Compiler
Hashes
| Type | Hash |
|---|---|
| MD5 | BB813951B9CEE9021A8654583BD64B42 |
| SHA1 | CC3FBC5FEA48C9AA2450E4F392B2B639CEEBAC87 |
| SHA256 | A7861CDC34B610E8DBE141370A234DC76165D46CD706D140F89A4956D3AEC9AE |
| SHA384 | E76B7B863255A43F65B7F4B489F54F33D0625E13EFD494055EE42FF4BB27C12766B86394C89DE569937AC679F5FF88DE |
| SHA512 | 2C6AE1D5BB4049097372FA01678D1CFB2EC581AB611D049E7F1D6105C29B33C8529638F42887EE3B6231A29FC66A758646BC1934063EC58FC23EDD578E1AC6CE |
| SSDEEP | 768:M0oBDC90adoUVD0ZCrC5vMOMC+7VoPv6yss5eDZ5XFmHSU6rkxkipWVXphok2:t90ajYXlDv6ysj6SlM2ok2 |
| IMP | 887702E888C5EE55D78938EF62E42B0E |
| PESHA1 | 7B225F95ADEF71002ADA1E671510DE97410545D6 |
| PE256 | FF4D9955BBE3A166DD4DB78F60389A6405488B7E5637C7C922C5189FE1F91B51 |
Signature
- Status: Signature verified.
- Serial:
33000002B7E8E007A82AEF13150000000002B7 - Thumbprint:
5A68625F1A516670A744F7EF919500A479D32A5B - Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: rc.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit ARM
File Scan
- VirusTotal Detections: Unknown
Possible Misuse
The following table contains possible examples of rc.exe being misused. While rc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
| Source | Source File | Example | License |
|---|---|---|---|
| sigma | proc_creation_win_plugx_susp_exe_locations.yml | Image\|endswith: '\rc.exe' |
DRL 1.0 |
MIT License. Copyright (c) 2020-2021 Strontic.