dstokenclean.exe

  • File Path: C:\WINDOWS\system32\dstokenclean.exe
  • Description: Data Sharing Service Maintenance Driver

Hashes

Type Hash
MD5 A4DEBFA0E5769D61C55AF5BD49536BD8
SHA1 4794B912F270B143366584ABAC746327D6C91D27
SHA256 E04D273A8A6A32D14B8E740752A9B3963463A1034ED956668E6F77E09E6E14B2
SHA384 521E29A52384A2BFD76DC18A38756969950F3BDA7B47C567F4497D34A8FA7AB819B791B24A4539DF661E330F3758AAF9
SHA512 E6FBF617FE13F450988C93AC8F7C7A7B26CCE056B06583E568459921CBB13C0415183942BF0F1679083E0D41EAE084D695994D8613561E6B11AC3C2C3019B5FB
SSDEEP 192:0vr1Jp3eTqGNdnxoqRejiK6Idpi3YtU7WdZflVtAQWzEW/0:Qzp3q7XnuqRejiJImYq7WNVRWzEW
IMP F1D06B8C52F369E9C51A17B21E2BD700
PESHA1 03D0628743BC314303E63B60D4F05A8914C6B138
PE256 D8788E527ADD0D0404DA0C7A180E11DE7E674667F2B6550F07A6770F44BF56B0

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\system32\dstokenclean.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: dstokenclean.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/e04d273a8a6a32d14b8e740752a9b3963463a1034ed956668e6f77e09e6e14b2/detection

MIT License. Copyright (c) 2020-2021 Strontic.