SenseNdr.exe
- File Path:
C:\Program Files\Windows Defender Advanced Threat Protection\SenseNdr.exe
- Description: Windows Defender Advanced Threat Protection - Sense NDR module
Hashes
| Type |
Hash |
| MD5 |
81313EF0ED451ADE07329E8E6D4C8C58 |
| SHA1 |
B59DBC99E480446D15798DCCD67228F3ABC61115 |
| SHA256 |
57C539D7A4058371783CF4321554D1B060C889DFB91332918A36EC9DFEE1A1DA |
| SHA384 |
B347D2545173A99C34E3B2EAD7502B491EDADBAFFFB7FE046C26C4F17E4E3E80231FEC4B988100DB6E961A4E8446D8D3 |
| SHA512 |
D03F489C372A25B38E4380330435121E8739307EC977E8315D3AB8CB133E24DCDC229FC15295CA8735FF8E35273E28874068CFD0A0B32C6E635280A16754ACF6 |
| SSDEEP |
12288:ULLrOmoAs00AdrfGDiNJh6+ZRIyMwtWr5k5zutMg+zkK:ULLrfkiNJRMw8Fk5qGg+zkK |
| IMP |
F2FA3492E838B2032E4A97E504CD7D3C |
| PESHA1 |
8C24806D5B3FCFD412891318D0287B4F28A79E02 |
| PE256 |
FE921C93C0AB63867AA26914284A6F65EB48363BB11F4E0F64BE27F1F4FD98D1 |
Runtime Data
Loaded Modules:
| Path |
| C:\Program Files\Windows Defender Advanced Threat Protection\SenseNdr.exe |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\CRYPT32.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\WS2_32.dll |
Signature
- Status: Signature verified.
- Serial:
33000002EC6579AD1E670890130000000002EC
- Thumbprint:
F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: SenseNdr.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.8040.19041.1320 (WinBuild.160101.0800)
- Product Version: 10.8040.19041.1320
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/57c539d7a4058371783cf4321554d1b060c889dfb91332918a36ec9dfee1a1da/detection
MIT License. Copyright (c) 2020-2021 Strontic.