WSManHTTPConfig.exe

  • File Path: C:\Windows\system32\WSManHTTPConfig.exe
  • Description: WSMan HTTP Configuration File

Hashes

Type Hash
MD5 7C0A337D8666F226C8587B675326BBE1
SHA1 F14E67BBB8353DBB29C96F10C4BD796D0950263C
SHA256 587852FA20AC5F36047F3D51041298873BD6D4986490A0C2DD433EFDE1096917
SHA384 4622B7190BBD4EA5CB0D6B6F09407C912F6CB5FEDD9AE67C4A22A10CB652E10C5C4CE2A25F763CA3DB65D3C1F5E3E3CB
SHA512 668D79B6CCF5B0FD83A7016F3820603305A2FEAF72E999646128D713C690A4DCB03292EAEF7E77F74654416960A1F796814F9469691920F68F3C10C0E8FAEA84
SSDEEP 384:Z2RKxIf1gZDw1F0VTHrjfKHPCfxiDgqgrg5gsgBgVgT8PJv1HVTi//2B/2/LWlRW:Z1Idgdw1GvjbfxaJtHFi//2FKu
IMP 566D264164FA6535966756FF3AE6625D
PESHA1 BF8A34308AC59D94CB940FFCAB3829F4A32C2421
PE256 59BB1FD0B6AF51E6E5A929211011C9CC67109402F7B8E9FA2A304C0BB2CD4230

Runtime Data

Usage (stderr):

WSMan Generic Command ERROR: Unknown switch: --help
WSMan Generic Command ERROR: Error in parsing input

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\CRYPT32.dll
C:\Windows\system32\DSROLE.dll
C:\Windows\system32\HTTPAPI.dll
C:\Windows\System32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\mi.dll
C:\Windows\system32\miutils.dll
C:\Windows\System32\MSASN1.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\system32\pcwum.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\WSManHTTPConfig.exe
C:\Windows\system32\WsmSvc.DLL

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WSManHTTPConfig.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.134 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.134
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/587852fa20ac5f36047f3d51041298873bd6d4986490a0c2dd433efde1096917/detection/

File Similarity (ssdeep match)

File Score
C:\windows\system32\WSManHTTPConfig.exe 35
C:\Windows\system32\WSManHTTPConfig.exe 40

MIT License. Copyright (c) 2020-2021 Strontic.