runexehelper.exe

• File Path: C:\Windows\system32\runexehelper.exe

Hashes

Type	Hash
MD5	EF0C465C98CDA8B213D16FF8922F30FA
SHA1	2EF1440AF4BBB2DF68CCB0080144608224D3D9C2
SHA256	096315A55905F932C280D17506151FD027328BB9C6E6399E1EFD7A6ADBC358CA
SHA384	D37DF16C4D66ADE72822303A88ADF8B707235A7620C59CC4510C91E74A14298BC8BE5E2B76643DE0CD1C284A44E2E557
SHA512	1D278EF156C8A0E52AC55727161B04DC83C8581A3DE167C3CC0B0F4A5FD1FA6EBF5E813F4F092DBFC3950BC2A8B7BDB3E0977A007CE9AF9966E3C847E5B757F3
SSDEEP	1536:3B3iUibdobUJVzAtfNqBBfK/L45uOTxU8:3FvbqVAtfN6STSuO
IMP	E66B94547D97B956C966DB1C1C41DBD6
PESHA1	3DDE1E721EC3273BDC0A670F5501B2A3351E196E
PE256	018FF1E30E82E40E3C053C58EF33E93FC700F747255712BC035A12462ECAECB0

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\runexehelper.exe

Signature

• Status: Signature verified.
• Serial: 330000026551AE1BBD005CBFBD000000000265
• Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename:
• Product Name:
• Company Name:
• File Version:
• Product Version:
• Language:
• Legal Copyright:
• Machine Type: 64-bit

File Scan

• VirusTotal Detections: 0/68
• VirusTotal Link: https://www.virustotal.com/gui/file/096315a55905f932c280d17506151fd027328bb9c6e6399e1efd7a6adbc358ca/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\runexehelper.exe	44

MIT License. Copyright (c) 2020-2021 Strontic.