EduPrintProv.exe

File Path: C:\WINDOWS\system32\EduPrintProv.exe
Description: Printer Provision Utility for EDU

Hashes

Type	Hash
MD5	`A2DEAC8DEE8B87542A63A647570E1F4E`
SHA1	`7BE6CE911EBC96FF5033FDFA10E0102B5B91A8F6`
SHA256	`99EE0560CBECB054658273AB7D530B2E3AEFCBC664024F939168BE924A24284E`
SHA384	`0F12C58B0715B1C5B14B49270EA38C84A999EE36799229B4D3DA861B30979D9E62B984421590973D4CD57C4EB1F8296A`
SHA512	`C4F4D89E38F4A649BFACA79FF0C0C9CA7B9B93633961ADE4A23350BC7F1D877E811D909A9BC0212AC3173084DFDBDFC890B19AE62716CE6F8028A8E1801FAF85`
SSDEEP	`3072:8a1K6pIORBki2zoO9icGS96nqpJpGuTfmWyWgl:B1K6RBki2BLAqpv9T+WyWg`
IMP	`3F2B8E192B11709CD9A47EE2901D9AE9`
PESHA1	`3D6FE3AAE398802B8EB22FE03D1E1192A07D424E`
PE256	`92105596950F5144A3C7C480833BFD2A36EAE674FF6A186936570E697C0CA7A9`

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\cfgmgr32.dll
C:\WINDOWS\system32\EduPrintProv.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\system32\msvcp110_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: eduprintprov.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/99ee0560cbecb054658273ab7d530b2e3aefcbc664024f939168be924a24284e/detection

MIT License. Copyright (c) 2020-2021 Strontic.