nmbind.exe

File Path: C:\Windows\system32\nmbind.exe
Description: Hyper-V Network Core Bind Application

Hashes

Type	Hash
MD5	`3D626FD2F40B613B7DA08DE5565682E5`
SHA1	`11589471C6879F64BBFA7EFEA9CF78A156620071`
SHA256	`C4E900D32FD21FE1122677CD7E579C0561D3E8E53B94F36994CE0290547CAAB9`
SHA384	`140A18B32ADE8026DBB28F72C0D1E0AC8040137A1C9149C2AD8707864A3E84ADA181CF8C3607D6035594E015D272F35D`
SHA512	`B61B4BFC7A1623C4F11B8D546F39B865B36345223BF732D732DB66997C0FE5112608A822646931D103419A929BE912B3A7CAFA3CA671813F745BA2FB88909F95`
SSDEEP	`3072:7Jrb1jaXehR21RoDbjGT69LGsCJsBJS7cmaYoldhTPI1M0x4ruH8Lj4:7JrBkef2YDbaJsBMKIxx4rPj4`

Runtime Data

Usage (stdout):

Hyper-V Network Core Bind Application 10.0.10011.16384.
Copyright (c) Microsoft Corporation. All rights reserved.

Usage: C:\Windows\system32\nmbind.exe [option] [NIC|*] [protocol|*]

Options:
   /n   display NIC information only
   /u   unbind switch protocol from specified nic(s)
   /b   bind switch protocol to specified nic(s)
   /d   disable binding of specified protocol from specified nic(s)
   /e   enable binding of specified protocol to specified nic(s)

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: corebind.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.17763.1 (WinBuild.160101.0800)
Product Version: 10.0.17763.1
Language: English (United States)

File Similarity (ssdeep match)

File	Score
C:\WINDOWS\system32\nmbind.exe	38
C:\Windows\system32\nmscrub.exe	43
C:\WINDOWS\system32\nmscrub.exe	43