LbfoAdmin.exe
NIC Teaming file version info
Program on Windows 3 known copies with hashes
Is it the real LbfoAdmin.exe?
Installed in
C:\Windows\system32\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNIC Teaming
3 known copies
10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\LbfoAdmin.exe · signed by Microsoft Windows
457c99ef5d87d7efc4b853ccc0d07ff16f9e411efb59a8b0fde4e85fed704b3910.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\LbfoAdmin.exe · signed by Microsoft Windows
7b07a154c26eab7a0086bd8d0288061ccead92787fd175db3fbc1f844af954e96.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\LbfoAdmin.exe · not signed
e187bc3df3b1240e34f0635d0ffe98e65e84bb0fbbe330f1b4c83abd77b71a2aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.