question

HenkPoley-2089 asked Mar 17, '22 HenkPoley-2089 edited Mar 17, '22

The link in the VirusTotal column of Process Explorer sometimes goes the webpage of a different (or already quit) process

E.g. HKClipSvc.exe (pid: 5260, 55305ee071099a4c9def10f906001ac3404e4ea18b43580213c65172347541cd) link opens: https://www.virustotal.com/gui/file/5c12b1335fb381214c4ea1166f6be30572dd5fc3951b562bc742eb0c5323066f/detection (XeroxPrintJobEventManagerService.exe)

And XeroxPrintJobEventManagerService.exe (pid: 5252) opens: https://www.virustotal.com/gui/file/6c03d7d935e0f13a0ff8e23ba8eb758c3ffe1e6c4e25b3956d16d21e202cb27a/detection (SentinelServiceHostExternalEngines.exe, which is currently not running)

PIDs are close, but not exactly consecutive.

Process Explorer 16.43

windows-sysinternals-procexp

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.