sdclt.exe
Microsoft Windows Backup by Microsoft
| Version: | 6.0.6001.18000 (longhorn_rtm.080118-1840) |
| MD5: | a623666c8a8ec9a57dca07915a3f1ec6 |
| SHA1: | 20d6d7175bac5073bd8705fd3697032d2278b2af |
| SHA256: | 00a864005315166e6e0e517945915362a31975a31478c0e41abe8ba73bdc6aea |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is sdclt.exe?
You can use the Backup utility to back up and restore data on your computer's disks.
About sdclt.exe (from Microsoft)
“Backup and Restore—improved for Windows 7—creates safety copies of your most important personal files, so you're always prepared for the worst. Let Windows choose what to back up, or pick individual f”
Overview
sdclt.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). It configures an autoplay handler withing explorer.exe named MSSdConfigBackup that will launch the program automatically. and is compiled as a 32 bit program.
Details
| File name: | sdclt.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft® Windows Backup |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\sdclt.exe |
| Original name: | sdclt.exe.mui |
| File version: | 6.0.6001.18000 (longhorn_rtm.080118-1840) |
| Product version: | 6.0.6001.18000 |
| Size: | 1.12 MB (1,169,408 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| Entropy: | 6.860738 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Scheduled tasks
- The task 'CheckFull' runs weekly in the path '\Microsoft\Windows\WindowsBackup\CheckFull'
- The task 'ConfigNotification' runs daily in the path '\Microsoft\Windows\WindowsBackup\ConfigNotification'
- The task 'Windows Backup Monitor' runs daily in the path '\Microsoft\Windows\WindowsBackup\Windows Backup Monitor'
- Entry path '\Microsoft\Windows\WindowsBackup\CheckFull'
- Entry path '\Microsoft\Windows\WindowsBackup\Windows Backup Monitor'
- Entry path '\Microsoft\Windows\WindowsBackup\ConfigNotification'
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'MSSdRunBackup'
- Handler name 'MSSdConfigBackup'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\Microsoft\Windows\WindowsBackup\Windows Backup Monitor'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00009636% | |
| Kernel CPU: | 0.00006896% | |
| User CPU: | 0.00002741% | |
| Kernel CPU time: | 780,005 ms/min | |
| Memory |
| Private memory: | 5.71 MB | |
| Private (maximum): | 9.9 MB | |
| Private (minimum): | 7.78 MB | |
| Non-paged memory: | 5.71 MB | |
| Virtual memory: | 62.5 MB | |
| Virtual memory (peak): | 75.38 MB | |
| Working set: | 8.14 MB | |
| Working set (peak): | 9.98 MB | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 113 | |
| GUI GDI count: | 75 | |
| GUI USER count: | 15 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
61.00% |
|
| Windows 7 Ultimate |
17.50% |
|
| Windows 7 Professional |
8.00% |
|
| Windows 8.1 |
3.00% |
|
| Windows Seven Black Edition |
2.50% |
|
| Windows 7 Home Basic |
2.50% |
|
| Windows 8 |
2.00% |
|
| Windows 8.1 Pro |
1.50% |
|
| Windows 8.1 Single Language |
1.50% |
|
| Windows 8 Enterprise N |
0.50% |
|
Distribution by country
United States installs about 58.00% of Microsoft® Windows Backup.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
23.22% |
|
| Hewlett-Packard |
22.47% |
|
| Toshiba |
17.23% |
|
| Acer |
13.48% |
|
| ASUS |
12.73% |
|
| Sony |
4.49% |
|
| Samsung |
2.25% |
|
| Alienware |
1.87% |
|
| Lenovo |
1.50% |
|
| Intel |
0.75% |
|
