PeopleExperienceHost.exe
- File Path:
C:\WINDOWS\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe - Description: Windows My People
Hashes
| Type | Hash |
|---|---|
| MD5 | 755516F100817B085A8366DCBD05CBE5 |
| SHA1 | 828E4A7A860C02ADDF2B03CAC2C70F4B8BD3DF91 |
| SHA256 | 5219BD8D81F460172ED6315656A660855835BABE4EFF2A0C49AC259359591254 |
| SHA384 | 4EA303E210129098F7DD8EA1CD23698A83291E3A7C17D5015FE38DBC50F8D252E00BC6C90D3459C488FC814839D3DE13 |
| SHA512 | 00B2CC10BB3C4E613B2D82CB29AB4B3C81B5D01801DC23796781A5BB903EAAA2C01171969C8C68B4C2B211C05D4057714D2DDACD2B82E3F4138936EADA25E7CC |
| SSDEEP | 12288:cmpeAzh0PQwPeCoNrNPhdeLcVSClB9EIwJcb0VUR/:cmbKJJM02R/ |
| IMP | 1F0F8D970826BD4EA99A79A17DD62FBD |
| PESHA1 | 3E3367EA454091A53F3B68BD645283DEC3D196B1 |
| PE256 | 9296F3811791E7BE5A68DE578439557333D6791C313DDCC83386826F562EFD5D |
Runtime Data
Child Processes:
PeopleExperienceHost.exe WerFault.exe
Loaded Modules:
| Path |
|---|
| C:\WINDOWS\System32\combase.dll |
| C:\WINDOWS\System32\GDI32.dll |
| C:\WINDOWS\System32\gdi32full.dll |
| C:\WINDOWS\System32\IMM32.DLL |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\System32\msvcp_win.dll |
| C:\WINDOWS\SYSTEM32\msvcp110_win.dll |
| C:\WINDOWS\System32\msvcrt.dll |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\System32\ole32.dll |
| C:\WINDOWS\SYSTEM32\policymanager.dll |
| C:\WINDOWS\System32\RPCRT4.dll |
| C:\WINDOWS\System32\shcore.dll |
| C:\WINDOWS\System32\ucrtbase.dll |
| C:\WINDOWS\System32\USER32.dll |
| C:\WINDOWS\System32\win32u.dll |
| C:\WINDOWS\SYSTEM32\wincorlib.DLL |
| C:\WINDOWS\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED - Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: PeopleExperienceHost.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.120 (WinBuild.160101.0800)
- Product Version: 10.0.22000.120
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: Unknown
MIT License. Copyright (c) 2020-2021 Strontic.