PeopleExperienceHost.exe

  • File Path: C:\WINDOWS\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe
  • Description: Windows My People

Hashes

Type Hash
MD5 755516F100817B085A8366DCBD05CBE5
SHA1 828E4A7A860C02ADDF2B03CAC2C70F4B8BD3DF91
SHA256 5219BD8D81F460172ED6315656A660855835BABE4EFF2A0C49AC259359591254
SHA384 4EA303E210129098F7DD8EA1CD23698A83291E3A7C17D5015FE38DBC50F8D252E00BC6C90D3459C488FC814839D3DE13
SHA512 00B2CC10BB3C4E613B2D82CB29AB4B3C81B5D01801DC23796781A5BB903EAAA2C01171969C8C68B4C2B211C05D4057714D2DDACD2B82E3F4138936EADA25E7CC
SSDEEP 12288:cmpeAzh0PQwPeCoNrNPhdeLcVSClB9EIwJcb0VUR/:cmbKJJM02R/
IMP 1F0F8D970826BD4EA99A79A17DD62FBD
PESHA1 3E3367EA454091A53F3B68BD645283DEC3D196B1
PE256 9296F3811791E7BE5A68DE578439557333D6791C313DDCC83386826F562EFD5D

Runtime Data

Child Processes:

PeopleExperienceHost.exe WerFault.exe

Loaded Modules:

Path
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\SYSTEM32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\SYSTEM32\policymanager.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\shcore.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\System32\win32u.dll
C:\WINDOWS\SYSTEM32\wincorlib.DLL
C:\WINDOWS\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PeopleExperienceHost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.120 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.120
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

MIT License. Copyright (c) 2020-2021 Strontic.