FXSCOVER.exe

  • File Path: C:\Windows\system32\FXSCOVER.exe
  • Description: Microsoft Fax Cover Page Editor

Screenshot

FXSCOVER.exe

Hashes

Type Hash
MD5 C6A119A2F9B40A456C1ED884F92C8A36
SHA1 86EEE17E6DBEC77BD43428CA16AD304993C1210B
SHA256 B38E19EBDAD15526CF8305059B53DFAA2F277EAE2E46EDF787F84D637CCA9170
SHA384 5A14300262B40CF6EA58AFD1EB1617FFD445116804AFCD4BC65946192477A80274FDDAACEE7F4397EC0D6D9384E2F6F8
SHA512 8CB6556A9A39CCA0A5C65F4261C324CF61CAB03BD7164B326797975D2D3B9110FA82598EEB3139FEEDABA6046EB1F9695DF620B4ECE55176BFE7B3583998B7C4
SSDEEP 6144:IHneTaNP4KlHL/ypsRISfyfoz6eKiDaHDok/:un/wKlHL/nRIteKpok/

Runtime Data

Window Title:

Cover Page - Fax Cover Page Editor

Open Handles:

Path Type
(R–) C:\Windows\System32\spool\V4Dirs\E556B2CD-FCA4-49FF-9CF4-7F71411DCF2E\69b8a4a.BUD File
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_e5f6db308a854d87\Amd64\PrintConfig.dll File
(R-D) C:\Windows\System32\en-US\FXSRESM.dll.mui File
(R-D) C:\Windows\System32\en-US\imageres.dll.mui File
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui File
(R-D) C:\Windows\System32\en-US\MFC42u.dll.mui File
(R-D) C:\Windows\System32\en-US\prntvpt.dll.mui File
(R-D) C:\Windows\System32\msxml6.dll File
(R-D) C:\Windows\System32\stdole2.tlb File
(RW-) C:\Users\user\Documents\Fax\Personal CoverPages File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.1397_none_de7645305346d5dc File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\BaseNamedObjects\windows_shell_global_counters Section
\RPC Control\DSECF94 Section
\Sessions\2\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\2\Windows\Theme4283305886 Section
\Windows\Theme1956823608 Section

Loaded Modules:

Path
C:\Windows\system32\FXSCOVER.exe
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: FXSCOVER.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.