DFDWiz.exe

  • File Path: C:\WINDOWS\system32\DFDWiz.exe
  • Description: Windows Disk Diagnostic User Resolver

Hashes

Type Hash
MD5 A5DD0F45AA6AFCBEA6C9CBBA8EC553A0
SHA1 2C8D3C6730ADFE37C978DA783B09F1CE9371145A
SHA256 222CEF8785EEB5A741FDC1373020AC64908A195F534135B33BDAAA0810E0F761
SHA384 A3EB65DE890838A60B93E430869C822FDF89D72595817A836F63A4DFCDF393582975A11CE87FA87C107400796257A169
SHA512 2AC9722417B716F44B8E4B4D858A34F2DF210AC15CC57DC6D3489214150225079ED856321E234A13A7D4496233A13D1FCE1172070412C5B7852307796E91DD16
SSDEEP 768:jaOxWmRfTOees6RAhRvRCBEu8oGUKDsK4kcKM3l+wg0ADeCMOli/uX6WxWeJF/m:ja/Sj7CKAKDXkKMYlli+xnJ
IMP 5202942CF3B997C119D156A2B094AD7E
PESHA1 26D2279BF9A673DAFC5C9B2CABAAF446482A0EB2
PE256 590F5AD9932DF004AD18A1E104CDB506C5403E78FF9B88EE5A1923631E7724F9

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\system32\DFDWiz.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DFDWiz.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/222cef8785eeb5a741fdc1373020ac64908a195f534135b33bdaaa0810e0f761/detection

MIT License. Copyright (c) 2020-2021 Strontic.