KernelDumpDecrypt.exe
- File Path:
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\KernelDumpDecrypt.exe - Description: Windows Kernel Dump File Decryptor
Hashes
| Type | Hash |
|---|---|
| MD5 | 3422BB95745E969F3306EA0B70C58A0E |
| SHA1 | 1E4E9CED0D5EC9F690946CCF2D7E6D61814D6514 |
| SHA256 | EDA7271A238227DCA5AD5A77187424F4F0CF0B9608C5F396424046FA4B632C35 |
| SHA384 | 95E02E9B75CC25D5BDE646D6FC37AD59BF1E16A3B0550DC5FF60A8B8D472C45D35E682F272F305B06ACE2782D8CDAFB8 |
| SHA512 | 99A8CA173739F259AC73B3100618C8C793E21B3E37F3DD5C0235EF4002887EF58071D60D52A4F36A2C3686DE63401C2B3DFB3EB8CD6C266C539F6999D6F701BA |
| SSDEEP | 384:o28MCX9nbZhsLWUtAuL0q7S1Y4WlETpYrN6aWoXWhvwMsl9ni:LfCXRbZhsP3L0Xu4JerUUqJ |
| IMP | 50C04B023899A8A29CF00DC8CDB570C8 |
| PESHA1 | 91EE4C092428D8D1EE02D4D429702EA2FB67C868 |
| PE256 | 2632D169CA03B45AE6563354434DB98DC54E245480D54044B6D3EA099ADD5189 |
Signature
- Status: Signature verified.
- Serial:
33000002B7E8E007A82AEF13150000000002B7 - Thumbprint:
5A68625F1A516670A744F7EF919500A479D32A5B - Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: KernelDumpDecrypt.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 452
File Scan
- VirusTotal Detections: Unknown
MIT License. Copyright (c) 2020-2021 Strontic.