wpcmon.exe

Microsoft Windows operációs rendszer

Microsoft Corporation

It runs as a scheduled task under the Windows Task Scheduler named FamilySafetyMonitor.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® operációs rendszer

Description:
Családbiztonsági figyelő

 
Part of the Windows Operating System

Version:
6.3.9600.17031 (winblue_gdr.140221-1952)

MD5:
60a4eaaa2964a3ecfd91a6ec9f8b72c0

SHA-1:
74dfb20ad8c9e9d58297fde69a4e6cc03a53dbe3

SHA-256:
eaf9a9dbf6f4173ebd3d2f63ac9905cc83934e7ee03f3518ffe9be4ec27f0d66

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/8/2016 3:09:59 PM UTC  (today)

File size:
2.9 MB (3,048,904 bytes)

Product version:
6.3.9600.17031

Copyright:
© Microsoft Corporation. Minden jog fenntartva.

Original file name:
WpcMon.exe.mui

File type:
Executable application (Win64 EXE)

Language:
Hungarian (Hungary)

Common path:
C:\Windows\System32\wpcmon.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
6/17/2013 11:43:38 PM

Valid to:
9/17/2014 11:43:38 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000002418FC0B689E7399D0000000000024

File PE Metadata
Compilation timestamp:
5/1/2014 8:57:08 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:Ss6XOzTmnr75pMImaYSkmQ5uOzu3NVsmaD:gOz6mL/5uOzQVsZD

Entry address:
0x1C4908

Entry point:
48, 83, EC, 28, E8, 93, 04, 00, 00, 48, 83, C4, 28, E9, 92, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, D1, 76, 07, 00, 75, 10, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 01, C3, 48, C1, C9, 10, E9, 82, 05, 00, 00, CC, CC, CC, CC, CC, CC, 48, 8B, C4, 4C, 89, 48, 20, 44, 89, 40, 18, 48, 89, 50, 10, 53, 56, 57, 41, 56, 48, 83, EC, 38, 4D, 8B, F1, 49, 63, F8, 48, 8B, F2, 83, 60, C8, 00, 48, 8B, DF, 48, 0F, AF, DA, 48, 03, D9, 48, 89, 58, 08, FF...
 
[+]

Code size:
2.2 MB (2,333,184 bytes)

Scheduled Task
Task name:
FamilySafetyMonitor

Path:
\Microsoft\Windows\Shell\FamilySafetyMonitor