winpty-agent.exe

File Path: C:\Program Files\Amazon\SSM\Plugins\SessionManagerShell\winpty-agent.exe

Hashes

Type	Hash
MD5	`4726115317D7B5750B9F82DE06356887`
SHA1	`F6748E6BED353B807EA1AC8E438BEE409E6524E9`
SHA256	`2C4E65E18115FC0672E2B2E017073CC01E26735E2C93FC291C6875EBE19431B3`
SHA384	`BBAD60A2C082BFB0040E0E1E17C7EC6E8B3948BAA55672C98915DF350348FD6D84C8368270066154DCBE6BC5ACC5EF38`
SHA512	`2695A32BACCE41BD72B0DA29CFEFB4CE41631CD2262A9C12329F96B824C286849A0A89868D189E431D03927DA79DEFBFC9E158D67B9186820C2AA097CCFE4F5C`
SSDEEP	`6144:AdaLEz8bmoLLZE5u+seLXg4uT2UPRJicxn2ArfcSMxHcA:h1iuHUXsicEArLA`
IMP	`C5C2F7AF66B045BC3972B97B804DC21B`
PESHA1	`F091A295B51EF5CD0B50C444CEA37AD528115C5E`
PE256	`EA0D6CFBF32E7DC463C693A9D984FF8EDD849A87473DB8C68007948DEAC9DCDB`

Runtime Data

Usage (stderr):

Usage: C:\Program Files\Amazon\SSM\Plugins\SessionManagerShell\winpty-agent.exe controlPipeName flags mouseMode cols rows
Usage: C:\Program Files\Amazon\SSM\Plugins\SessionManagerShell\winpty-agent.exe controlPipeName --create-desktop

Ordinarily, this program is launched by winpty.dll and is not directly
useful to winpty users.  However, it also has options intended for
debugging winpty.

Usage: C:\Program Files\Amazon\SSM\Plugins\SessionManagerShell\winpty-agent.exe [options]

Options:
  --show-input [--with-mouse] [--escape-input]
                   Dump INPUT_RECORDs from the console input buffer
                   --with-mouse: Include MOUSE_INPUT_RECORDs in the dump
                       output
                   --escape-input: Direct the new Windows 10 console to use
                       escape sequences for input
  --version        Print the winpty version

Loaded Modules:

Path
C:\Program Files\Amazon\SSM\Plugins\SessionManagerShell\winpty-agent.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: The file C:\Program Files\Amazon\SSM\Plugins\SessionManagerShell\winpty-agent.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170
Serial: ``
Thumbprint: ``
Issuer:
Subject:

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/2c4e65e18115fc0672e2b2e017073cc01e26735e2c93fc291c6875ebe19431b3/detection/