user.exe

  • File Path: C:\Windows\SysWOW64\user.exe
  • Description: User

Hashes

Type Hash
MD5 75743455895DF7D19188C13DA687D9F2
SHA1 285939B879E072D68AC527F1F76E3BC1380C7236
SHA256 0C3D8D735E9C63F87D9CB6DEE3A8CCF6CB30207C65AFB5EF0ED8CC1323B957AF
SHA384 281DDC4EFC753F0011464292386F238AECD4F747CF8BC3D4A0F5DCD8C4B3EEA39AD00269C3546578890E75FB4BAE66EF
SHA512 22D09A0EFBEC4E9FFCDBD47248E9C15D955D6F297B575B76EF4D5C1F16A0DFD2D2932173004AF2B450E740D2E682D1368C60C1C091BA6CD395F673FF6E8D0387
SSDEEP 24:ev1GSAK+CAz888qTyNGK9fZY0y1cIZW0g5cNLtt2Si35WWdPfPNDx:qAKAzCqTafZY0yKIZWjgLtPo5Ww1D
PESHA1 E5B2D5DDEF3103E6E943653CA7D561F6DB757840
PE256 7B97CFA22F611E57CB6257CB465E02F6EBE20B709F3C26A5A4AD79C663B08163

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\user.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: User.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1023 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1023
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/0c3d8d735e9c63f87d9cb6dee3a8ccf6cb30207c65afb5ef0ed8cc1323b957af/detection

File Similarity (ssdeep match)

File Score
C:\windows\SysWOW64\user.exe 52
C:\WINDOWS\SysWOW64\user.exe 52
C:\Windows\SysWOW64\user.exe 50
C:\Windows\SysWOW64\user.exe 79
C:\Windows\SysWOW64\user.exe 47
C:\WINDOWS\SysWOW64\user.exe 50
C:\Windows\SysWOW64\user.exe 79

MIT License. Copyright (c) 2020-2021 Strontic.