lpremove.exe
- File Path:
C:\WINDOWS\system32\lpremove.exe
- Description: MUI Language pack cleanup
Hashes
| Type |
Hash |
| MD5 |
BF81724CA48991D7DBF218D5DC9ACB08 |
| SHA1 |
98A1469719EF2196B7067117C13D380D91547558 |
| SHA256 |
62353861D0C1908BFAEE2EE6C80BD04F449990E163C7B1DB929A24C892C235FF |
| SHA384 |
E9D4F36C79040FE2722032FB5C27FBE27104F2CCA84BF77D1FC3124258271E977A0C230C1AE850F4AE58BA9C0C00B9D5 |
| SHA512 |
93EB3211E9B00441FC0FE99EFFF553C9CBC4DD0EC8C199323EE1944C4B6DCBDD259657A7489ED8005873D2986ED9FA44B0C0447F6F4C464E076089F446635BB2 |
| SSDEEP |
1536:h6KOzfsP1I0R00ICivpCTYgp43xC09O2iZB66b2kNsiycnaITinQCZh5wTIV1OYI:TYfsPy0R0DlpAKR9O2iCPcbTUQCzq41M |
| IMP |
E3FA2980E95BEAAF4EA84962D2493198 |
| PESHA1 |
D70CFD7661E0DC60EAB06467B47ADFD009CA4E92 |
| PE256 |
D5AD1BCCE723C7C79E3315D9A468EFE4B438F83FE017A9880FB7E873974125FA |
Runtime Data
Loaded Modules:
| Path |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\system32\lpremove.exe |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: lpremove.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/62353861d0c1908bfaee2ee6c80bd04f449990e163c7b1db929a24c892c235ff/detection
MIT License. Copyright (c) 2020-2021 Strontic.