Fwdlmgr.exe — ^new^

What is fwdlmgr.exe? A Complete Technical and Security Analysis

fwdlmgr.exe is a legitimate Windows system file associated with Windows Defender Firewall and Internet Connection Sharing (ICS). Its name stands for Firewall Manager.

PURGING CACHE...

Disclaimer: This article is for informational purposes only. Always ensure you trust the source of any executable file before interacting with it. fwdlmgr.exe

You're looking for a good piece, presumably a signature or a digital certificate, related to fwdlmgr.exe. What is fwdlmgr

• Legitimate: Parent should be FortiClient.exe, FortiTray.exe, or Services.exe (running as a service).
• Malicious: Parent is explorer.exe (you launched it manually), cmd.exe (scripted launch), or winlogon.exe (persistence mechanism).

Restore firewall service if disabled by malware:
sc config MpsSvc start= auto
sc start MpsSvc

So where is it?