nmbind.exe

File Path: C:\WINDOWS\system32\nmbind.exe
Description: Hyper-V Network Core Bind Application

Hashes

Type	Hash
MD5	`4F9F573505E8E050D3194B282824BE27`
SHA1	`BE124F04C405F9C955F1CC34B6AAAA2327DE3F56`
SHA256	`4B2D41005A04776629EB42042D0AA43467D9E77BEF51F633C9F4B69C53EE8FF2`
SHA384	`2B91723C10236AFCB0E49FCADD7DD66A0449E7D77D78E2F23EA9FB592BD8CA1E31E0496A3CB17ACD825849C6EDB511EB`
SHA512	`E5589240DA7F95731B174C50415B852B8ED79F97A869D78FCBCE7C8AD8811A8781CED92F167C2368AE21E1DE174232C26774507C1485CD098EABEDFFF4CA33FC`
SSDEEP	`3072:/4euIuc8dS/S6T69LGsC+QVwjckfbUUQscmaYoldhT6ByXIx6CFVQgB4k:Aqu7dcS6+QVw4UBbx6CDb`

Runtime Data

Usage (stdout):

Hyper-V Network Core Bind Application 10.0.10011.16384.
Copyright (c) Microsoft Corporation. All rights reserved.

Usage: C:\WINDOWS\system32\nmbind.exe [option] [NIC|*] [protocol|*]

Options:
   /n   display NIC information only
   /u   unbind switch protocol from specified nic(s)
   /b   bind switch protocol to specified nic(s)
   /d   disable binding of specified protocol from specified nic(s)
   /e   enable binding of specified protocol to specified nic(s)

Signature

Status: Signature verified.
Serial: 330000023241FB59996DCC4DFF000000000232
Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: corebind.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.18362.752 (WinBuild.160101.0800)
Product Version: 10.0.18362.752
Language: English (United States)

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\nmbind.exe	38
C:\Windows\system32\nmscrub.exe	38
C:\WINDOWS\system32\nmscrub.exe	40