Information about PROCEXP152.SYS

» File
File Details
Overview
Analysis

PROCEXP152.SYS

File Details

Main Info:

Product Name:	Process Explorer
Company Name:	Sysinternals - www.sysinternals.com
MD5:	fabb357337ecb05398cf00cc68f75951
Size:	33 KB
First Published:	2017-10-04 20:09:46 (7 years ago)
Latest Published:	2018-01-14 14:07:33 (7 years ago)

Analysis:

Status:	Undefined (on last analysis)
Analysis Date:	2018-01-14 14:07:33 (7 years ago)

Overview

Digital Signature

Signed By:	Sysinternals
Status:	Valid

Common Places:

%localappdata%\temp

%system%

Geography:

	55.6%
	22.2%
	22.2%

OS Version:

Windows 10	77.8%
Windows 8	22.2%

Analysis

PE Info:

Subsystem:	Native
PE Type:	pe
OS Bitness:	64
Image Base:	0x0000000180000000
Entry Address:	0x00009058

PE Sections:

Name	Size of data	MD5
.text	9216	9712ff1f36cd1da580f8cbd0b2b7494d
.rdata	3072	80b1b33f824ff121659acd6b7355f929
.data	512	59d112039ab68500ce071d2a95698020
.pdata	1024	5d75dd7336f0d81d371dd057c69cc3d2
PAGE	7168	23e43505846b04f585b4ef9e03dd1aad
INIT	2560	2f86ec8a93fb2c814d6b5a960f544337
.rsrc	1024	f1b122a953aefe384cd624dff12992b3
.reloc	512	b73a845c6b1c6ae573f4fc6deb2d4219

More information:

Search on Virustotal

copyright for information about PROCEXP152.SYS