dtdump.exe
- File Path:
C:\Windows\SysWOW64\dtdump.exe
- Description: DTDUMP.EXE
Hashes
Type |
Hash |
MD5 |
74A3A862FB349D64357D5219EA711D4F |
SHA1 |
5FFEC70E8133232E956F65703B998FC0DA5CDE9C |
SHA256 |
6EE12F9E2FF2341F8C7ACDFFF069F33EB3733AFABB79276D14CB3FD78D61ADE5 |
SHA384 |
F272D5FEA444449E2E710DA542500B2518F3A9EACE667C7905902EDEE97D91CAA6F3B3BCBF260EB2473682AA6538BAF5 |
SHA512 |
F5478CB30B63640433390F1510AFE104AF7430DBDD3D576E0953856C066A5DAAC2217E430445ABC88A700393CE502340422505FA51421B2C4B97FC4486FC2027 |
SSDEEP |
1536:5jaJT/bph6rM1ZsXZ6gvP2WSHV+SsunZfzBO0LeBzvIN35DAjRj8:haFD6rM1+Igv+WSHlnZ9pDkZ |
IMP |
E9EE3C17FDA6CDAFA2FEBE014F32BF8D |
PESHA1 |
BEB714635940A22D0A1B5DC6D3BB51B19F285178 |
PE256 |
F5775390D3D64B36124C7404EE38524A3F8746E7677F8F77E84DE29B27AAFF09 |
Runtime Data
Loaded Modules:
Path |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
C:\Windows\SysWOW64\dtdump.exe |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: DTDUMP.EXE
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1518 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1518
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: Unknown
MIT License. Copyright (c) 2020-2021 Strontic.