WWAHost.exe

File Path: C:\Windows\system32\WWAHost.exe
Description: Microsoft WWA Host

Hashes

Type	Hash
MD5	`7DD41153A8EF9FD79DE8B18229E4AC1D`
SHA1	`0F7963CB907CBD20D7FB8E57053407418F2B6109`
SHA256	`7ED6B168F43F1283BDE9B43E1FA474A59EDE1B9DF40C8F5B67D9577ACAE4B42E`
SHA384	`CD6B62E0CBBA7B413E45900D11A59CD922CA4438C9586CE4E32FA8D2A85DF57678E5D0BFECD416D81360E9E04E41224B`
SHA512	`D465C9E66670B18B591D0196E326ED1F6794A4850E63ADDCF5494FB6550AFA4FB25C009A9079303343322BD76F84EF32FAA04CEF4C8B52AB9E58C328D902448E`
SSDEEP	`12288:tCJ7La52OIWHNZWdSIXc80v2mpdEAYwZ80weyjLr3LaLpLbLvL4LHKLAL1LRLDLq:tKL+aWHOd1AEs8+cfZkx`
IMP	`776D81C69E48C4B5A6D3D63C53C60259`
PESHA1	`095A576FDD6A6C7ADC41D2E69852931D0DB92FF5`
PE256	`1BC37A6375A31A6FB39C0A8947269C05AE51730615728274DFF8E20FF17C8F68`

Runtime Data

Child Processes:

WerFault.exe

Loaded Modules:

Path
C:\Windows\SYSTEM32\apphelp.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\WWAHost.exe

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WWAHost.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/7ed6b168f43f1283bde9b43e1fa474a59ede1b9df40c8f5b67d9577acae4b42e/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\WWAHost.exe	40
C:\Windows\system32\WWAHost.exe	32

MIT License. Copyright (c) 2020-2021 Strontic.