NetEvtFwdr.exe

  • File Path: C:\Windows\system32\NetEvtFwdr.exe
  • Description: Event Forwarder

Hashes

Type Hash
MD5 B147935BF4110AE8109DF02615334992
SHA1 22B3D01459D968301047F0C69F6674EA13BC85A1
SHA256 DB6E21EDA0CC254FA0A2B613C9A369DD4CACFDEE98B0F5942F56F40926B66D75
SHA384 42150FB3B9FF98AB7056E852AA21F73A9B65EEB7F4FDF4E5D8088495E5FE642ADFE539C6AED66499D4D07E28518F9EE3
SHA512 8FF94A3C64165775A0280E50F27936E0477730F8AB8685E22293F8B35E1FB01E2AB60139473FC57911E9870D4D6AE7B9D7203A3F9DADB2AB908551410AB9F2D3
SSDEEP 768:z9gabaMs1I49GiE6SQSzEZFkSTeZIW9H+YjsXcblKhc5udRQOQ2DT045ud0kFlk1:hzBCB0ijSQ4Y8lKcAdRQOQ2DxAekF6VD

Signature

  • Status: Signature verified.
  • Serial: 33000001733031072665B8B9B3000000000173
  • Thumbprint: 14590DC5C3AAF238FCFD7785B4B93F4071402C34
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NetEvtFwdr.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.