user.exe

  • File Path: C:\Windows\SysWOW64\user.exe
  • Description: User

Hashes

Type Hash
MD5 FD94F4868778F6142F68AC32928EDB58
SHA1 33598712DFABE86851476DE7D68BF2AFE63D4CA7
SHA256 AE62BC1EA069F1E99EE71731A0A37A4C1AF4ED221B3F0714238989A92C533A44
SHA384 9DAEDEE868330F629B1141651E5D733A37D86F721927D1FF8FDDAAD7300D53B03F6305DB123A50B99C5F2C91D07579A3
SHA512 C3A43D720C179810E32C81AA3073687A8DFA644FFFB936A225A04927D8964CF3C64480831BB8B1A7EB66FD78CC3FF835574786F9EFCB5BB4A43576E6BC6A8502
SSDEEP 24:ev1GSAK+hAz888qTyNGK9fZY4to6IZW0gbN6l2Si35WWdPOPNm:qAJAzCqTafZY4tFIZWjh6no5Wwa
PESHA1 4E34E84C742074D1CE97A8945F75BD2537DEDEB6
PE256 ACA820FD888A312CC9E895B66F2CE24CE4B377A6FE6B51F62250E050060901C6

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\user.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: User.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.423 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.423
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/ae62bc1ea069f1e99ee71731a0a37a4c1af4ed221b3f0714238989a92c533a44/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\icmp.dll 50
C:\Windows\system32\tier2punctuations.dll 46
C:\Windows\system32\tzres.dll 41
C:\Windows\SysWOW64\icmp.dll 47
C:\Windows\SysWOW64\tzres.dll 40
C:\windows\SysWOW64\user.exe 57
C:\WINDOWS\SysWOW64\user.exe 54
C:\Windows\SysWOW64\user.exe 54
C:\Windows\SysWOW64\user.exe 79
C:\Windows\SysWOW64\user.exe 83
C:\Windows\SysWOW64\user.exe 50
C:\WINDOWS\SysWOW64\user.exe 47

MIT License. Copyright (c) 2020-2021 Strontic.