dtdump.exe

  • File Path: C:\Windows\SysWOW64\dtdump.exe
  • Description: DTDUMP.EXE

Hashes

Type Hash
MD5 74A3A862FB349D64357D5219EA711D4F
SHA1 5FFEC70E8133232E956F65703B998FC0DA5CDE9C
SHA256 6EE12F9E2FF2341F8C7ACDFFF069F33EB3733AFABB79276D14CB3FD78D61ADE5
SHA384 F272D5FEA444449E2E710DA542500B2518F3A9EACE667C7905902EDEE97D91CAA6F3B3BCBF260EB2473682AA6538BAF5
SHA512 F5478CB30B63640433390F1510AFE104AF7430DBDD3D576E0953856C066A5DAAC2217E430445ABC88A700393CE502340422505FA51421B2C4B97FC4486FC2027
SSDEEP 1536:5jaJT/bph6rM1ZsXZ6gvP2WSHV+SsunZfzBO0LeBzvIN35DAjRj8:haFD6rM1+Igv+WSHlnZ9pDkZ
IMP E9EE3C17FDA6CDAFA2FEBE014F32BF8D
PESHA1 BEB714635940A22D0A1B5DC6D3BB51B19F285178
PE256 F5775390D3D64B36124C7404EE38524A3F8746E7677F8F77E84DE29B27AAFF09

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\dtdump.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DTDUMP.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1518 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1518
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown

MIT License. Copyright (c) 2020-2021 Strontic.