NetEvtFwdr.exe
- File Path:
C:\WINDOWS\system32\NetEvtFwdr.exe
- Description: Event Forwarder
Hashes
| Type |
Hash |
| MD5 |
4B91252C09C6B19E66CC25530EBA8149 |
| SHA1 |
BB7A4673CDA1CE949438214CE28CA1DF728B731D |
| SHA256 |
D92B0A8A1FB43EADE95490B8990F2DEE5349806B677A98108A7343B51C1C4311 |
| SHA384 |
B4AFBB3825FDF189B6638082600DE51A16E3A6C46B39360E1A5C40079E2C7A671A9BA49C085A9EEB1067001E0B494B98 |
| SHA512 |
43F9AC2BC0082895241036E88F6E50B13876A446358FE125B2AF74887ED66EEE9ACB4D4C9F866C7061DBE4550420DBDC92A6EDC72EC110D680B393256223A389 |
| SSDEEP |
768:qnArbAxvTi6aFZZrIS2W1MQFfCCJYrr6/YxC:qnAMvTeFZZrISrFfMv6/YxC |
| IMP |
B194E8CEE136F2419EB0D33C5AC52E3F |
| PESHA1 |
564D3F8ECAB5FF9E92636487CA8BD2E6F5005F84 |
| PE256 |
662A8EA738A6EA6BCA84C55F61AD9C3A6F84151DED598F238D06B8DE3B5F2828 |
Runtime Data
Loaded Modules:
| Path |
| C:\WINDOWS\System32\KERNEL32.DLL |
| C:\WINDOWS\System32\KERNELBASE.dll |
| C:\WINDOWS\system32\NetEvtFwdr.exe |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: NetEvtFwdr.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/d92b0a8a1fb43eade95490b8990f2dee5349806b677a98108a7343b51c1c4311/detection
MIT License. Copyright (c) 2020-2021 Strontic.