Configure-SMRemoting.exe

File Path: C:\Windows\system32\Configure-SMRemoting.exe
Description: Configure-SMRemoting

Hashes

Type	Hash
MD5	`59EF03A3CE316E02EC6C916E86715282`
SHA1	`A47CE1CBBF89AE72FC4575D6A21EBB93856ED6E5`
SHA256	`E26FE2AD8452293B4B1E957B21371693996941A4D3D2371E7E51A35892C59418`
SHA384	`74086034DDBCB3DE293522F949BBE627CE36C0B93A3F4B928AC05D3BEAE4F915EF5B9C9B4B526D076F877819675572BD`
SHA512	`682CA659B0CC47E235FB5177E41359565339CFD6B41651CF448961B4131DA57F3A410047D0AB4A7E36D0EA545A368AD7774B4DD418F688512D273FC4294B4661`
SSDEEP	`768:Z8RbOjsY9kR/Luxlf3qHgeNljODzWLZGj+B/YYLyOoZzytqfvbJbkYLEzXQbJW5P:uR89+pSLf3YgmlNwfXOtqfj2FrBW`

Runtime Data

Usage (stderr):

Configure-SMRemoting.exe -GET | -ENABLE | -DISABLE

Signature

Status: Signature verified.
Serial: 33000000BCE120FDD27CC8EE930000000000BC
Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: Configure-SMRemoting.EXE.MUI
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.14393.0 (rs1_release.160715-1616)
Product Version: 10.0.14393.0
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\Configure-SMRemoting.exe	29
C:\windows\system32\Configure-SMRemoting.exe	21

Possible Misuse

The following table contains possible examples of Configure-SMRemoting.exe being misused. While Configure-SMRemoting.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source	Source File	Example	License
sigma	image_load_wsman_provider_image_load.yml	`- 'C:\Windows\System32\Configure-SMRemoting.exe'`	DRL 1.0