ApplePhotoStreams-AppX.exe

  • File Path: C:\Users\user\AppData\Local\Microsoft\WindowsApps\ApplePhotoStreams-AppX.exe

Hashes

Type | Hash – | – MD5 | SHA1 | SHA256 | SHA384 | SHA512 | SSDEEP |

Runtime Data

Open Handles:

Path Type
(R-D) C:\Windows\System32\en-US\shell32.dll.mui File
(R-D) C:\Windows\System32\en-US\windows.storage.dll.mui File
(RW-) C:\Windows File
(RW-) C:\WINDOWS\SysWOW64\ File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_e541a94fcce8ed6d File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.22000.282_none_162e9dd7277998f6 File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\windows_shell_global_counters Section

Loaded Modules:

Path
C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 33000003F16206E3E7EFDA8ABE0000000003F1
  • Thumbprint: 5362FAEB842C236D05A729B7FAC85BAA1B68BDCA
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename:
  • Product Name:
  • Company Name:
  • File Version:
  • Product Version:
  • Language:
  • Legal Copyright:

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\program files (x86)\Common Files\Apple\Apple Application Support\YSLoader.exe 86
C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileBackup.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileBackup.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileSync.exe 83
C:\program files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe 82
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.IE.client.exe 83
C:\program files (x86)\Common Files\Apple\Mobile Device Support\com.apple.IE.client.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.Outlook.client.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\com.apple.Outlook.client.exe 82
C:\program files (x86)\Common Files\Apple\Mobile Device Support\com.apple.Safari.client.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.Safari.client.exe 85
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.WindowsContacts.client.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\com.apple.WindowsContacts.client.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.WindowsMail.client.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\com.apple.WindowsMail.client.exe 83
C:\program files (x86)\Common Files\Apple\Mobile Device Support\MDCrashReportTool.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MDCrashReportTool.exe 83
C:\program files (x86)\Common Files\Apple\Mobile Device Support\Mingler.exe 82
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\Mingler.exe 86
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncDiagnostics.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\SyncDiagnostics.exe 82
C:\program files (x86)\Common Files\Apple\Mobile Device Support\syncli.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\syncli.exe 85
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncPlanObserver.exe 86
C:\program files (x86)\Common Files\Apple\Mobile Device Support\SyncPlanObserver.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe 80
C:\program files (x86)\Common Files\Apple\Mobile Device Support\SyncUIHandler.exe 80
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncUIHandler.exe 85
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\upgradedb.exe 85
C:\program files (x86)\Common Files\Apple\Mobile Device Support\upgradedb.exe 82

MIT License. Copyright (c) 2020-2021 Strontic.