EDPCleanup.exe

File Path: C:\Windows\system32\EDPCleanup.exe
Description: EDP Cleanup

Hashes

Type	Hash
MD5	`F2E7EC88CCD751BAE4B6D643FBEA2538`
SHA1	`7D31823A375F37705E3EBD1A9D270973046473FF`
SHA256	`786C5853DB2B504FBD4258D219FF7F9E0A044E1DEDCE3CDA178DB84C689264B3`
SHA384	`4FF38B9487F4965BFB3972104E3EE89091DD7EB5DA072C1A63FFF6831E72C9ADB701D5CBD5B53E81ADCA1B926A0B51F3`
SHA512	`44019F137633AC537F372467812C4DFB99C6DEF828DC76B2AB0B8F64B3ED9221642AD1F63253ADC2AB4875CE7A6E188608012D5CD17E4C822799B68FDC756E6D`
SSDEEP	`3072:ms9//BfxrXPYIceeWgdpHdxS7ervbq6/pnYt6FupG:ms9//N9fYIceerpHdtvbYt4g`
IMP	`D9E5BDC7004B886C9D93408EEE1DAA54`
PESHA1	`2043C0CBDFE3D1C3BA5936393F98A7F469EFDDED`
PE256	`2EAC65F96B1CCA2EF03CEF21D180F7A7403AB924400F1F0F2F43BDEA641DAF39`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\system32\EDPCleanup.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\msvcp110_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: EDPCleanup.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.789 (WinBuild.160101.0800)
Product Version: 10.0.19041.789
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/70
VirusTotal Link: https://www.virustotal.com/gui/file/786c5853db2b504fbd4258d219ff7f9e0a044e1dedce3cda178db84c689264b3/detection

MIT License. Copyright (c) 2020-2021 Strontic.