dtdump.exe

  • File Path: C:\Windows\SysWOW64\dtdump.exe
  • Description: DTDUMP.EXE

Hashes

Type Hash
MD5 F627ACD73E9509C277114879C494FE13
SHA1 877EA571E8F035989F165F1A64C45440CEADECEA
SHA256 231CFC4B8EAD3421CD1DF85C8E06B3B9EC58680828FF505B648490164402C5C5
SHA384 E5D5A7529F4381EEB7DE75952CB10CCCD29FA1884D17776435440FE085DE0040ADD425677B762498CC6780D0EA1AE60E
SHA512 E5A8128F7818495D57A6B28B0F53AA6FE79B241BFC3D995A7257817D8B93B0E2C919C5B417DFF3CA85FF336E3EC5E892B791CE2923DF98B5C066001641572FFF
SSDEEP 1536:5M/1fJT/bDh6rc7WT3s6w1PVhEiTVda0E8ZnLnvxuLCzvINX5Y:G9FF6rc0bw1dmiT/ZdufJY

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\dtdump.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DTDUMP.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1397 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1397
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\dtdump.exe 97

MIT License. Copyright (c) 2020-2021 Strontic.