spaceman.exe

File Path: C:\Windows\system32\spaceman.exe
Description: Storage Spaces Manager

Hashes

Type	Hash
MD5	`5247539E5510A12BB64BDEF04027BEFB`
SHA1	`C4DDBB32C13E207CE722774973D8763B47136155`
SHA256	`2FB7C331A06B426C128EF653EB3496D0F8C8EF9A7D32195B9B660E559E6933C9`
SHA384	`C91706ACAC79B98E9D718D32BEFB1EB372DDDBE4D8C55F323F0F5EC4C528495651019445B0200101A2A6DF6A37ED9ADF`
SHA512	`8BCC343970A397B04FD36F42433CC29874B298C8683BBC4B0E8BAB0219066AAA447C5C4712F35E2392D5B173F2694AACAF5B79F02910F569B71790C50BBF5129`
SSDEEP	`1536:8HoTF57DmNa8k6/LKS+3V2Oq8RumqFBCebX0OWDHNQn8vRQihZDXilfilIpAP9O:oVkGKSiEmQEewOutQn8JQwDI1as`
IMP	`581D85730A874BFD1BE217C45C2021D9`
PESHA1	`A83C3A7C3235CE98473E6190280AFD7F8DDD5AE4`
PE256	`D629CAAB9A8580386584AFF5376DA1ADCA8533200825CF856DAFDD18362CC041`

Runtime Data

Child Processes:

cmd.exe powershell.exe

Loaded Modules:

Path
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\system32\spaceman.exe

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: spaceman.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: Language Neutral
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/72
VirusTotal Link: https://www.virustotal.com/gui/file/2fb7c331a06b426c128ef653eb3496d0f8c8ef9a7d32195b9b660e559e6933c9/detection

MIT License. Copyright (c) 2020-2021 Strontic.