DWWIN.EXE

  • File Path: C:\Windows\system32\DWWIN.EXE
  • Description: Windows Error Reporting

Hashes

Type Hash
MD5 444CC4D3422A0FDD45C1B78070026C60
SHA1 97162FF341FFF1EC54B827EC02F8B86FD2D41A97
SHA256 4B3F620272E709CE3E01AE5B19EF0300BD476F2DA6412637F703BBADED2821F0
SHA384 F311C58452CAD4F7DE11784886CE59A5CEEF381F32C90B9BE83D45F24AEF01A7B1997034A4700C1912E98F60B8125944
SHA512 21742D330A6A5763EA41A8FED4D71B98E4A1B4C685675C4CFEB7253033C3A208C23902CAF0EFDF470A85E0770CB8FAC8AF0EB6D3A8511445B0570054B42D5553
SSDEEP 3072:TokBNjRjNi/UNr2RwnGe02ZfivS0xpdPNTMyI85lM0KJFYQaBGKjx/Oxv1zIE:NRjNyUNYje03v51NTMk5lMjiv/q1zI
IMP FE9551C19FFA0B0B4EC670BA900DCB7F
PESHA1 EFCD09574C3B52A273543384189A934AF894F284
PE256 C0EF01E4637C57D911411A1AA0C1B223821AA718A26D68C35CC229A7ED19FDBD

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\system32\DWWIN.EXE
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\system32\VERSION.dll
C:\Windows\system32\wer.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DWWIN
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/4b3f620272e709ce3e01ae5b19ef0300bd476f2da6412637f703bbaded2821f0/detection

MIT License. Copyright (c) 2020-2021 Strontic.