WWAHost.exe

File Path: C:\Windows\SysWOW64\WWAHost.exe
Description: Microsoft WWA Host

Hashes

Type	Hash
MD5	`7C7EDAD5BDA9C34FD50C3A58429C90F0`
SHA1	`6303EF7E494C2DB14964D628B2277A6B0A7262AF`
SHA256	`D0898B6A02B129CA90ACD446C3390A22DDA9273FD0599FD942B545679C2B8EA6`
SHA384	`23FB1DE697BEC8F6FEB2B352EFC132F6E5FAC564EFF44797C5B8CE1569859F59F595BD699030F76D8586D11768E7F2DF`
SHA512	`A7435D7023B1A217E3B097254719B452EE1D1F462CFCE0C391F6CFB6DF59AD190850FA26FD9795887C7AD92AAFE896CE3388B5E01F96766FEC3F696918B5AD0A`
SSDEEP	`12288:FkGforSWv3BLEGomLGLYLpLbLyKLmLqLSLqLlL6LvLOYeayWnvEdDcovoNoXoa5c:ivBk5/EI1FXYwuz3rH3/O`
IMP	`60365796344275664F17370C07717F93`
PESHA1	`20BC92F106661A1974441882A53760A5BE9E6E10`
PE256	`677334AF47AB2373DFE1700334FEDCE3D121A534B37C14380860585BF290EC92`

Runtime Data

Child Processes:

WWAHost.exe WerFault.exe

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\WWAHost.exe

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WWAHost.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/d0898b6a02b129ca90acd446c3390a22dda9273fd0599fd942b545679c2b8ea6/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\WWAHost.exe	72
C:\Windows\SysWOW64\WWAHost.exe	90
C:\Windows\SysWOW64\WWAHost.exe	83

MIT License. Copyright (c) 2020-2021 Strontic.