Information about PROCEXP152.SYS

» File
File Details
Overview
Analysis

PROCEXP152.SYS

File Details

Main Info:

Product Name:	Process Explorer
Company Name:	Sysinternals - www.sysinternals.com
MD5:	cec257dcac9e708cefb17f8984dd0a70
Size:	40 KB
First Published:	2017-07-11 17:05:06 (7 years ago)
Latest Published:	2018-07-11 23:10:30 (6 years ago)

Analysis:

Status:	Clean (on last analysis)
Analysis Date:	2018-07-11 23:10:30 (6 years ago)

Overview

Digital Signature

Signed By:	Microsoft Windows Hardware Compatibility Publisher
Status:	Valid

Common Places:

%localappdata%\temp

%temp%

Geography:

	40.9%
	22.7%
	22.7%
	13.6%

OS Version:

Windows 10

100.0%

Analysis

PE Info:

Subsystem:	Native
PE Type:	pe
OS Bitness:	64
Image Base:	0x0000000180000000
Entry Address:	0x00009058

PE Sections:

Name	Size of data	MD5
.text	9216	f6d6fe01fd01f0859a8029f93b218fd7
.rdata	3072	6af08030f6d59e3f3fffcfc0ff710011
.data	512	90aafabcf96c874f6d19dfc07072890f
.pdata	1024	29302949f839b803f98e1532bc47a1cb
PAGE	7168	f42e3d0ca52ccc3b8c644c920380c672
INIT	2560	2f86ec8a93fb2c814d6b5a960f544337
.rsrc	1024	f1b122a953aefe384cd624dff12992b3
.reloc	512	b73a845c6b1c6ae573f4fc6deb2d4219

More information:

Search on Virustotal

copyright for information about PROCEXP152.SYS