espexe.exe
- File Path:
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\espexe.exe - Description: Microsoft Windows(TM) Economical Service Provider Application
Screenshot
Hashes
| Type | Hash |
|---|---|
| MD5 | E12EF8D3AA1DC8E8286C5CB67EC11B3C |
| SHA1 | 3EBB3CCA9BD51AB8D62F25CCD4DD2A79E2C85702 |
| SHA256 | 8927C3D8D6E8C6CB3A0B3361BBE10E0C321432B12A71BBB3B349217CE3A464C8 |
| SHA384 | E03CED53DEFE42961A9ED9FA1B553EC834F4BF8F1981A5B3B9EFF1FC4C5E22FC2941FDF58E75A658347BA9859AC030C4 |
| SHA512 | B8C039B0FD51EF68AF13C4E82041C224B5974C74F8C4BAA5AAC66F7778DB69F3BCCC4375509806A85FD2C2A2E7C5492C4F07906B8876EA2A6CA6D6EEE3EF0ADB |
| SSDEEP | 768:TnGs2mWJqrwFBaCJTnfBX3Zp/NojQriyzjHLCjE2WM2/nsG:TnGsvWJOIaCDppF8eLCgnMUsG |
| IMP | B91D743C6E376F713B4FAA57CF04F85D |
| PESHA1 | ADFE4BF29143E267CC4DEA4D16E00615CD9DFEE3 |
| PE256 | 25553397C07FCF87C3E3DA2D2A8DD9A99A86651080299C6EA20DB35157EC51E1 |
Runtime Data
Window Title:
ESP: The Economical Service Provider
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (R-D) C:\Windows\System32\en-US\user32.dll.mui | File |
| (RW-) C:\Users\user | File |
| (RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21 | File |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db | Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 | Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \Sessions\1\Windows\Theme1383959086 | Section |
| \Windows\Theme2042523233 | Section |
Loaded Modules:
| Path |
|---|
| C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\espexe.exe |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\IMM32.DLL |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
33000002CF6D2CC57CAA65A6D80000000002CF - Thumbprint:
1A221B3B4FEF088B17BA6704FD088DF192D9E0EF - Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: ESPEXE.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Copyright Microsoft Corporation 1995. All Rights Reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: Unknown
MIT License. Copyright (c) 2020-2021 Strontic.