NetHost.exe

  • File Path: C:\Windows\system32\NetHost.exe
  • Description: EXE for configuring VPN proxy

Hashes

Type Hash
MD5 0C8BEC1C52FFA65CB36D21404E8F54DE
SHA1 2D97F07676F85C6D1A24B84164268C9AE9EB3DB9
SHA256 BA3426F2B9C5B657F38721BDF7AC3229804597544FF5F4096D9F858AD00C8A3D
SHA384 D653A5CE59C713314D8BE7D1D1860A3654BBE970BCFAB6D189FCDF2B2D89BC99D09CF93AE0C088DC4C9EA2C82B292C18
SHA512 B94AD801DB8F9BF9BDDFEE02DA4CBDE2587E0BA4C951C0DC9AF45CEDAAD7EDB3888B81C9A8E17438BEAF6502DD277EA4DE5847CA367B820F4479750E521850F2
SSDEEP 192:MG9pCGrh+bHyLDZV4/iZoypDrGysekf7WdEqW:7vCGd0HyXZuu5p3if7WdEqW
IMP 68873B7B30277427484800907F68E033
PESHA1 245DC263041E4AEB7C175684DC5BA06052E84D33
PE256 65BDDF34BD83447FDDCB14EE8843921DBC97ECA2DD6CEE2B55FC0638B3F9F86F

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\NetHost.exe
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: nethost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/ba3426f2b9c5b657f38721bdf7ac3229804597544ff5f4096d9f858ad00c8a3d/detection

MIT License. Copyright (c) 2020-2021 Strontic.