WWAHost.exe

File Path: C:\Windows\system32\WWAHost.exe
Description: Microsoft WWA Host

Hashes

Type	Hash
MD5	`7D9FA478A888364A5F82A8C9C2A45D9C`
SHA1	`A7E0A33307AC640577F747EB153A2C4DC3FE4F00`
SHA256	`1B3069159897DBBB2518C1698A4A62FDE15E5475717CA177A3677B9E9D5FA7F9`
SHA384	`3C647765A7E5B9CBF2004CBAC3C6D2F757D4B9566F6E69F55AB7B64D7F643102548F19F83C5166B1EA8CFF1739E66261`
SHA512	`EBEC8DC0BD9C3FD31E6BDB051DDF985406F0082F21C47614F672B7468C0E7F6E2E02780A160B4FACA7DBEA437933D4BF44CFA9BC58DAA069FB722028BF42A4C1`
SSDEEP	`12288:52sEToothRP1iTbdlQlJm/LtVbSOFOvUhc4C/qB7AaS47CNwfpULpL4LaLvKLSLg:DELzgBlQK3aoPpg7GfjZ89vQ`
IMP	`EBA419BF1904E24EBC1D5E420D4E0E2E`
PESHA1	`E533D3E1BB8BCE0133BC6A02EF265F1E685A043B`
PE256	`FD6A759CB2081622684477B576806C6565942E222FC01186CC37DB3B7C68E13F`

Runtime Data

Child Processes:

WWAHost.exe WerFault.exe

Loaded Modules:

Path
C:\Windows\SYSTEM32\apphelp.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\WWAHost.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WWAHost.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/75
VirusTotal Link: https://www.virustotal.com/gui/file/1b3069159897dbbb2518c1698a4a62fde15e5475717ca177a3677b9e9d5fa7f9/detection

File Similarity (ssdeep match)

File	Score
C:\WINDOWS\system32\WWAHost.exe	25

MIT License. Copyright (c) 2020-2021 Strontic.