Firewall.cpl

File Path: C:\Windows\system32\Firewall.cpl
Description: Windows Defender Firewall Control Panel DLL Launching Stub

Hashes

Type	Hash
MD5	`0BAD3AC7632D40DE6419C3CC187EF573`
SHA1	`0FBD58F7C3403DB1AD1675792616EEB147D9AB62`
SHA256	`BB615C2D8792A9B104BB66502CF9CF1D34AEE1BB7CC9AD640DF11AC6886DE16C`
SHA384	`8683B3884212AB052B9851C3733E7E59B3DDBAF159DC1DB5CD35FA0166FB5BCD1D2722AC99C93205B1751F85805AD3DC`
SHA512	`DE5DD316D5F8E1B223755674E37223E4EF6980CE6AF96036BCFF03318F0DAF8123279AE8BD497E52011E92A96184E0B9CD7506B44967088A0CCE2869D92B50DE`
SSDEEP	`96:kCJfN3dGzZLi8ITjhEtTeYe0XEWfo0rQWw:rljGzZeVTjhEtTlebWxMW`
IMP	`13966DD66EF8AF37125AB9F403C70715`
PESHA1	`D21092AE755513BA8419C12318820A113042A73A`
PE256	`9D2F3AF37B3D4B1AD102EC8BF862483783509B4781E70AA512469EA8C7C0525C`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\imagehlp.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\SYSTEM32\rundll32.exe
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: firewall.cpl
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/74
VirusTotal Link: https://www.virustotal.com/gui/file/bb615c2d8792a9b104bb66502cf9cf1d34aee1bb7cc9ad640df11ac6886de16c/detection

MIT License. Copyright (c) 2020-2021 Strontic.