EtwProcessor.Managed.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\EtwProcessor.Managed.dll
  • Description: EtwProcessor.Managed.dll

Hashes

Type Hash
MD5 45B8BF602DD358DD8212822F86A6338F
SHA1 DDE018148F9B7698C56AC47C9060EC62A797FD2B
SHA256 F256AD8BA38586ED691F43EF449D9AA61296F39ECB1589F7EE12CE219B48F8D5
SHA384 9EE10021AD0B5C3B66DC3EC4EE90F907E667E2B037F5E41787CAB28353FEBCE0CCE2E051170D9B335F8A2EFEE5D29F4E
SHA512 530BF438BEC1BDAE6663B2557869A60D74CC664CACAB5A47CCCA6068F0A9821503F1A7A438F4788F08AC2ADB5A27C6C9E339626CFCAC164CF8F19B1B12153C7E
SSDEEP 768:eS9BkU4060r4pjMlrJTlSZZYJjyte88IwCfT:AU4w4iDc8Jjd1W
IMP DAE02F32A21E03CE65412F6E56942DAA
PESHA1 33F1E31493445866D2750D0F4049496028337743
PE256 70FA74A71EF45FA1AF2268DAEEE2E7C574DB6B8CFA7516CAD53080DE4E918748

Signature

  • Status: Signature verified.
  • Serial: 33000001519E8D8F4071A30E41000000000151
  • Thumbprint: 62009AAABDAE749FD47D19150958329BF6FF4B34
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EtwProcessor.Managed.dll
  • Product Name:
  • Company Name: Microsoft Corporation
  • File Version: 10.43.1909.04003
  • Product Version: 10.43.190904003-develop
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown
  • VirusTotal Link: n/a

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\MinTe\EtwProcessor.Managed.dll 100
C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\x64\EtwProcessor.Managed.dll 100
C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\x64\MinTe\EtwProcessor.Managed.dll 100

MIT License. Copyright (c) 2020 Strontic.