nmbind.exe

  • File Path: C:\WINDOWS\system32\nmbind.exe
  • Description: Hyper-V Network Core Bind Application

Hashes

Type Hash
MD5 4F9F573505E8E050D3194B282824BE27
SHA1 BE124F04C405F9C955F1CC34B6AAAA2327DE3F56
SHA256 4B2D41005A04776629EB42042D0AA43467D9E77BEF51F633C9F4B69C53EE8FF2
SHA384 2B91723C10236AFCB0E49FCADD7DD66A0449E7D77D78E2F23EA9FB592BD8CA1E31E0496A3CB17ACD825849C6EDB511EB
SHA512 E5589240DA7F95731B174C50415B852B8ED79F97A869D78FCBCE7C8AD8811A8781CED92F167C2368AE21E1DE174232C26774507C1485CD098EABEDFFF4CA33FC
SSDEEP 3072:/4euIuc8dS/S6T69LGsC+QVwjckfbUUQscmaYoldhT6ByXIx6CFVQgB4k:Aqu7dcS6+QVw4UBbx6CDb

Runtime Data

Usage (stdout):


Hyper-V Network Core Bind Application 10.0.10011.16384.
Copyright (c) Microsoft Corporation. All rights reserved.

Usage: C:\WINDOWS\system32\nmbind.exe [option] [NIC|*] [protocol|*]

Options:
   /n   display NIC information only
   /u   unbind switch protocol from specified nic(s)
   /b   bind switch protocol to specified nic(s)
   /d   disable binding of specified protocol from specified nic(s)
   /e   enable binding of specified protocol to specified nic(s)


Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: corebind.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.752 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.752
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\nmbind.exe 38
C:\Windows\system32\nmscrub.exe 38
C:\WINDOWS\system32\nmscrub.exe 40

MIT License. Copyright (c) 2020-2021 Strontic.