ntfrs.exe

  • File Path: C:\Windows\system32\ntfrs.exe
  • Description: File Replication Service

Hashes

Type Hash
MD5 6435BC2854D09094AD8E31128ECDC178
SHA1 8F665EA904D009C7485A7B845D08F2F558B17758
SHA256 BB45FC3DA0A6F9A0C95B14785D6DE9DC2DBE685442BC1B40BC053E26D3FBEF11
SHA384 342C0ECA4C89BF15212D2A7ED9246D1D2BAF70E80CF4184B36CC0BC9F36B9600D958A768E64098F1EDE32EA8A93C76AB
SHA512 DD7317C4B3DD99659871BC85A6BA4FD0CC1E3C311959AFCD3A16C5FDF495A036DE5009EA42C86F582D18EB2EE2A6D5A3379DFF2BA5D6C7C91D3115A742A765FD
SSDEEP 24576:RUCYOeeLToXP95jYm4KTmfP0uQmO0hqmIlvUu0+BYZk9c:ReyLujX4KiFQH+32vUul9c

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\ntfrs.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NTFRS.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.