CheckNetIsolation.exe

File Path: C:\Windows\system32\CheckNetIsolation.exe
Description: AppContainer Network Isolation Diagnostic Tool

Hashes

Type	Hash
MD5	`D10C9B005F33BF144A26A18EF0D73213`
SHA1	`77A2D770C1CA10A1E01DB8E83D067A729E22E90C`
SHA256	`67BC058C8EA0B7FD21C412EFC0D2EECC4AFB67CF5BDC5981A8212E1AF8FDF49E`
SHA384	`EF6E88DA7131B3A32C6529D07490318FDB9327CA0B498DA1680139D31CF7E97325A6EB7FAB54605DAC968F8C9D6CF9EC`
SHA512	`C152DF850C66D9018F8310E44FA989145317E80374BB33EC9A008D96F9931A2EB9CE3FF502B54CCA0E3C2D381739BB316C30FE84630BEC7BF2DB7DB3C2209E75`
SSDEEP	`384:JumhBXqAPA+fPt1NTSNq5XbdnGWEBFg1tf1qaaUeQVtdtNtqObOW77pOWM:PhB6A4+t1PmHBFg1ia4QJ3tLbr7p8`
IMP	`E437A3A0162600CE23B282A0DFA53D7B`
PESHA1	`A5E2F0EA13CB065B5E606D5A98EF419C387C2C18`
PE256	`F47E743125963798BAED006E408DFA6862993905BC04A84AE3738EDE1F46B7E0`

Runtime Data

Usage (stdout):

Error: Invalid Parameters

Usage:
   CheckNetIsolation [Module]
      List Of Modules: 
          LoopbackExempt - controls the loopback exemption of AppContainers
                           and Package Families to ease application
                           development.
          Debug          - Starts a network traffic troubleshooting session
                           of an AppContainer or Package Family. Generates a
                           report of network capabilities that are used, not
                           used or missing, together with the network traffic
                           generated by the application.
          -?            -  Displays this help message.
      

Loaded Modules:

Path
C:\Windows\system32\CheckNetIsolation.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: CheckNetIsolation.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.17763.1 (WinBuild.160101.0800)
Product Version: 10.0.17763.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/71
VirusTotal Link: https://www.virustotal.com/gui/file/67bc058c8ea0b7fd21c412efc0d2eecc4afb67cf5bdc5981a8212e1af8fdf49e/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\CheckNetIsolation.exe	30