SystemSettingsRemoveDevice.exe
- File Path:
C:\Windows\system32\SystemSettingsRemoveDevice.exe - Description: SystemSettingsRemoveDevice
Hashes
| Type | Hash |
|---|---|
| MD5 | 38094CF7418F80261FBCFE4288E4A95D |
| SHA1 | 282977AB479CA2A8748DA83212CD4C142A921060 |
| SHA256 | 27440393C18EBCCD75ABEE131F60DAAB6B2B017FDF71F6DD741C631316786E8A |
| SHA384 | B8C3FFD024AAE1E160F418A8789FE7079B5481D62A10EF85034D4046A8E7D810A7DF6228DFCC06220748A3E078B00D53 |
| SHA512 | 231F3CFB449629EEBB22158C6C75D4D71694B28DC1D94C8AC43E6326EE2054BDF0223FCC44861123EB80EC47889181D5C4E993696241B8E954F8791F9FA5CB34 |
| SSDEEP | 768:kYNC/XUjRVVYuaS9bvhko6LgatpOt+VDpOZczcEBgXj1PcO6:fFTso6MMpO1ZG1+pP76 |
| IMP | 9DC9B6E9378726AD78F12FE890DECC7F |
| PESHA1 | B57E8793778426C885022A812F2D8DE896F0FC9A |
| PE256 | 19E7069914125BF8223765F62C241D4F65BE4ACAC960C1344AC998D6B1E5CDCA |
Runtime Data
Loaded Modules:
| Path |
|---|
| C:\Windows\System32\ADVAPI32.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\cfgmgr32.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\cryptsp.dll |
| C:\Windows\system32\DUI70.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\IMM32.DLL |
| C:\Windows\System32\kernel.appcore.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\powrprof.dll |
| C:\Windows\System32\profapi.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\shcore.dll |
| C:\Windows\System32\SHELL32.dll |
| C:\Windows\System32\shlwapi.dll |
| C:\Windows\system32\SystemSettingsRemoveDevice.exe |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\system32\uxtheme.dll |
| C:\Windows\System32\win32u.dll |
| C:\Windows\System32\windows.storage.dll |
| C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.1518_none_de6e2bd0534e2567\Comctl32.dll |
Signature
- Status: Signature verified.
- Serial:
33000001C422B2F79B793DACB20000000001C4 - Thumbprint:
AE9C1AE54763822EEC42474983D8B635116C8452 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: SystemSettingsRemoveDevice.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/27440393c18ebccd75abee131f60daab6b2b017fdf71f6dd741c631316786e8a/detection/
MIT License. Copyright (c) 2020-2021 Strontic.