xpsrchvw.exe
- File Path:
C:\WINDOWS\SysWOW64\xpsrchvw.exe - Description: XPS Viewer
Screenshot
Hashes
| Type | Hash |
|---|---|
| MD5 | 9D69BF2A6EF5E1B33FB003A21F6F89D3 |
| SHA1 | 3A7903795DD1BC75B3179DAA4CECFEF4CBAFD54A |
| SHA256 | ED50B1B008F34A3BF2A7522879354FF4D16C65D2216A90A6137BC7862900821B |
| SHA384 | 12BBDB4010E63416711252EF36B8DC6099FFF86706422250F59F2EF2214FC8CE7DD12467E7D98EB985B5C33B99BABAB1 |
| SHA512 | 3B358BED00208577CA7E851D2632DEF80A6F598A9866E6E76DD76D2C5082CABD19141FF5AF8A24AFB6F378786CE63CC60CE0B220D6E279EAB1D156523A5415EB |
| SSDEEP | 98304:rZyF/G7lguXXc4woibmo4TAmmEWltaQMwhJ:lfgurwoibmo4TAmmEWinw7 |
| IMP | 3025E77E0961D92CAE5BDB42BEB33263 |
| PESHA1 | FC9E228C4AC9D534B6FEE6A34237BFDD9781CE2C |
| PE256 | A18F8DB397B3EB423BD798C626C96A2DCEE5BC483929E65742E4AB59DA478DF4 |
Runtime Data
Window Title:
XPS Viewer
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (R-D) C:\Windows\System32\en-US\duser.dll.mui | File |
| (R-D) C:\Windows\SystemResources\imageres.dll.mun | File |
| (R-D) C:\Windows\SysWOW64\en-US\xpsrchvw.exe.mui | File |
| (R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_b335b4dbed333454\comctl32.dll.mui | File |
| (RW-) C:\Windows | File |
| (RW-) C:\Windows\SysWOW64 | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_b335b4dbed333454 | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_e541a94fcce8ed6d | File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.22000.282_none_162e9dd7277998f6 | File |
| \BaseNamedObjects__ComCatalogCache__ | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro | Section |
| \Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \Sessions\2\Windows\Theme1077709572 | Section |
| \Windows\Theme3461253685 | Section |
Loaded Modules:
| Path |
|---|
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\System32\wow64.dll |
| C:\WINDOWS\System32\wow64base.dll |
| C:\WINDOWS\System32\wow64con.dll |
| C:\WINDOWS\System32\wow64cpu.dll |
| C:\WINDOWS\System32\wow64win.dll |
| C:\WINDOWS\SysWOW64\xpsrchvw.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED - Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: xpsrchvw.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/ed50b1b008f34a3bf2a7522879354ff4d16c65d2216a90a6137bc7862900821b/detection
MIT License. Copyright (c) 2020-2021 Strontic.