NetHost.exe
- File Path:
C:\Windows\system32\NetHost.exe
- Description: EXE for configuring VPN proxy
Hashes
| Type |
Hash |
| MD5 |
D7DDC0404F4F360DB6CE67130B176BD3 |
| SHA1 |
A2746F1E4CD2AC26F385A93EF420C69E881B2265 |
| SHA256 |
77264F41C4107B9C7E9ABC32E82CF0F6097F16902DE096F32BDD0EC298C07AD2 |
| SHA384 |
C113C9E7C375DACB035AB19E206D1A538075785313D6A30DE850E1E9245630805D88E8E61A75CADFD3514E9A960CE45B |
| SHA512 |
49EA2601E4C994A105BCB879775A360D0F61D0F3DE328550F058B507BB95386A34853F5EFA64F12D17EB35CDF4FBFDE3B8C4D994FCABDBD36843B6CF60BAC5DF |
| SSDEEP |
192:0Ukp7DelQmX+jF2ynCJHkyVXhGyEXkfhzWdvqW:0v36XaFdnWHBXh1fhzWdvqW |
| IMP |
68873B7B30277427484800907F68E033 |
| PESHA1 |
0FC5D22AF187CCEDC119B2A935C95B4F551A79CD |
| PE256 |
A2B0399357D7819FB27D5549DFD0D73006BC13233E955010AC862FBBFEE3551C |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\System32\advapi32.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\system32\NetHost.exe |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\system32\RASAPI32.dll |
| C:\Windows\system32\rasman.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\ucrtbase.dll |
Signature
- Status: Signature verified.
- Serial:
33000001C422B2F79B793DACB20000000001C4
- Thumbprint:
AE9C1AE54763822EEC42474983D8B635116C8452
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: nethost.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/67
- VirusTotal Link: https://www.virustotal.com/gui/file/77264f41c4107b9c7e9abc32e82cf0f6097f16902de096f32bdd0ec298c07ad2/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.