PlacesServer.exe

Places WinRT OOP Server

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Places WinRT OOP Server

Version:
6.4.9879.0 (fbl_cortana_dev01(brentcou).141104-1440)

MD5:
9dab7e2304c4f2f2728e5a3a80bea1e2

SHA-1:
9763bed7726e03ee0d6500bfd6c869d29ba92b4b

SHA-256:
b0e5a888262adbfacf53c78588d7f232eae0f6180fe5eee4434c3edd0b9aeab1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/21/2017 7:52:59 AM UTC  (today)

File size:
1.4 MB (1,474,048 bytes)

Product version:
6.4.9879.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
PlacesServer.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\windowsapps\microsoft.windowsmaps_4.0.41121.2741_x64__8wekyb3d8bbwe\placesserver.exe

File PE Metadata
Compilation timestamp:
11/12/2014 2:26:37 AM

OS version:
6.4

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.10

CTPH (ssdeep):
12288:los/s3lF203xm9DrxGdiYFN4h5XbOK1nDGqh0895RWOlw38EcU8k:los/s3603xm9DAOPXNBiEWUo8EcU8k

Entry address:
0x7D60

Entry point:
48, 83, EC, 28, E8, 2B, 04, 00, 00, 48, 83, C4, 28, E9, 6E, FD, FF, FF, CC, CC, CC, CC, CC, CC, FF, 25, 7A, 07, 10, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, FA, 08, 10, 00, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, F9, 48, 8B, 05, 30, 9E, 14, 00, 48, 89, 44, 24, 38, 48, 83, F8, FF, 75, 17, 48, 8B, 1D, 5E, 08, 10, 00, 48, 8B, CB, FF, 15, DD, 08, 10, 00, 48, 8B, CF, FF, D3, EB, 5D, B9, 08, 00, 00, 00, E8, 9A, 04, 00, 00, 90, 48, 8B, 05...
 
[+]

Entropy:
5.6926

Code size:
1 MB (1,076,736 bytes)

Scan PlacesServer.exe - Powered by Reason Core Security