ndfetw.dll
- File Path:
C:\Windows\SysWOW64\ndfetw.dll
- Description: Network Diagnostic Engine Event Interface
Hashes
| Type |
Hash |
| MD5 |
68E01782FF607A485C108DC79C928B27 |
| SHA1 |
E705CF2C1DABEE23C69616DB527BD7ECE4D58AFD |
| SHA256 |
75DC1D2A5BB46AECB222249717EE97B567B41A129EF8E65B23E9D91F3880C8E6 |
| SHA384 |
3E11CBD6EF5424FEF47BF534A45A9AE6F269659D84A16BBAE3C27139BFB5E1FAE477F5C82BBE6A4C382484BE99D4CA9F |
| SHA512 |
AD060B42C62AC33C673660032BF411D04D2A7E8CD3C60F7ECD5E499AC3A83E61AE106E317BCC7370C3F2DFBAD0FC39CB9AA519417F88A0AC7FA5CF750FC6B80A |
| SSDEEP |
768:0fY5QElUk4yRcJXiwuU7lkMJplLS/xmg+zPHO:0OV+JmIyxglkMJplgmgaPHO |
| IMP |
A059E830B3D0821D06E1A9C5EAE87ADC |
| PESHA1 |
27934C3C925197EE5B7E25F8C1079C86A23A01CE |
| PE256 |
22C11D9F052895DA50D3EF82A63DFD72DBEFB430837091ED5899864EDE717990 |
DLL Exports:
| Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: ndfetw.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/75dc1d2a5bb46aecb222249717ee97b567b41a129ef8e65b23e9d91f3880c8e6/detection/
MIT License. Copyright (c) 2020-2021 Strontic.