runexehelper.exe

File Path: C:\Windows\system32\runexehelper.exe

Hashes

Type	Hash
MD5	`928C96503D628409A7D00287B893A7C2`
SHA1	`9A1E2C5769EE2E605745B4032DFC6D8932A7CA44`
SHA256	`D0426AE4BDF1C4910ABA092396BB1D55EABBD8246B2977CF069D1BDE0711CD4B`
SHA384	`BB933B617A0DA785BA52A773B8977A7057E985FDD3CD8F34C31CC58DDF52FFBB5495BE21BE87FF3263C4D32690CFCC88`
SHA512	`3E7A63D65EC34B1DFA97E98DDE332CF1107CCF300F946049E2A1AC23254105A21EF72A5629AAD534B189B4F4707D55EE3983494D4CE1B8A728043C0C22224E83`
SSDEEP	`1536:MnmN+KmLPwX/bSJjITNBZmBNYrjh5uuTxUT:MmEKmybAkTNB40jDuuO`
IMP	`E66B94547D97B956C966DB1C1C41DBD6`
PESHA1	`1874AAE030E702686DF6B83D7F98DE6F26639D19`
PE256	`CCCEDC0695C2CFF197A14C79C9E83D05F03AB40EFFCBFF51B7BB51C80A4E4B45`

Runtime Data

Child Processes:

csrss.exe winlogon.exe

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\runexehelper.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/76
VirusTotal Link: https://www.virustotal.com/gui/file/d0426ae4bdf1c4910aba092396bb1d55eabbd8246b2977cf069d1bde0711cd4b/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\runexehelper.exe	90

MIT License. Copyright (c) 2020-2021 Strontic.