• File Path: C:\Windows\SysWOW64\HOSTNAME.EXE
  • Description: Hostname APP


Type Hash
MD5 5E616C9669D38258231AF5EECDE4E221
SHA1 B99FABC8BA76828FCA672B6CB1B66DD719F95D2B
SHA256 5FB2D17787FFEC622AB296775632F9B7A4BE42CC06D3DA92B4CD6BC288AD035C
SHA384 E4FD0303478DB9C48E2DBDFD36B7001C1FC9A069E1FCD56BEEDBA6974581B2AB7973442955037BBBCC9070DBCF91CB25
SHA512 64ABAF35019AF831ECC3DDC452626E6B7AEF00D07B4990C294C888336D114885E2675C339A752E641CC41DCEFE00D63B9D98C0BAFA2387EDD2E0AA1125EF5FD2
SSDEEP 192:9q00yPTs6Aqq6Nz1B1ZWWgfXabxwu7Wa6WEDB:A00GTszqqA1B1gWpbxHWa6WE
PESHA1 DF65F0A820B215B46F1362DB96A0E9D00CBD8C08
PE256 39CEE0C1111380BE96561BF19AB8BDCF1A8E4CC815157617D4CF50994EAE75DB

Runtime Data

Usage (stdout):

Prints the name of the current host.


Usage (stderr):

sethostname: Use the Network Control Panel Applet to set hostname.
hostname -s is not supported.


  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: hostname.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link:

Possible Misuse

The following table contains possible examples of HOSTNAME.EXE being misused. While HOSTNAME.EXE is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma apt_silence_downloader_v3.yml - '\hostname.exe' DRL 1.0
sigma win_multiple_suspicious_cli.yml - hostname.exe DRL 1.0
sigma win_susp_commands_recon_activity.yml - hostname.exe DRL 1.0

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


Applies to: Windows Server (Semi-Annual Channel), Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Displays the host name portion of the full computer name of the computer.

[!IMPORTANT] This command is available only if the Internet Protocol (TCP/IP) protocol is installed as a component in the properties of a network adapter in Network.




| Parameter | Description | | ——- | ——– | | /? | Displays help at the command prompt. |


To display the name of the computer, type:


Additional References

MIT License. Copyright (c) 2020-2021 Strontic.