ProximityUxHost.exe

  • File Path: C:\WINDOWS\system32\ProximityUxHost.exe
  • Description: Proximity UX Host

Hashes

Type Hash
MD5 47AE239AE573CB77D433A441D174B04A
SHA1 056D3360A78F4EF70A2828465DB98267CBFB348C
SHA256 D02E185DFA45E808101CF857E271D192238852C5F3FAC068A7B21B50C6590F5F
SHA384 196D731F1D760027AA9D02BED1F0C1FF57F848D4E569468F923C31879005182E8D89A1E961A163BCCCE46858C2C3F6E7
SHA512 A6E3C85CADCEE88370E40AD35001BD520CBFD6B6D47D074F365A4979724C7011DC80800F316F39CC6BAF10B0AB3A6C56D05D7D01F15FD9C707F3329FDC4305AA
SSDEEP 6144:du9zQeppMKrkQtDZah9LJeOqahgpsib8/EalByZ6dPV3mn1ijWFTRmGmvbb:dMzQopMKrkQtDZah9VeOqaosibHa/FF3
IMP 990B21E44126A2EA7F5228F8340DFAE5
PESHA1 DB658AD1B8B0BA09A7AF079406599378A7C0D96B
PE256 BBB25858920A8744FD51C5432318D8396B4024EBF9E83B73E7036E0A4C89FEAB

Runtime Data

Open Handles:

Path Type
(R-D) C:\Windows\System32\en-US\ProximityUxHost.exe.mui File
(RW-) C:\Windows\System32 File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\ProximityUxHost.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ProximityUxHost.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/d02e185dfa45e808101cf857e271d192238852c5f3fac068a7b21b50c6590f5f/detection

MIT License. Copyright (c) 2020-2021 Strontic.