WaaSMedicAgent.exe

  • File Path: C:\Windows\system32\WaaSMedicAgent.exe
  • Description: WaasMedic Agent Exe

Hashes

Type Hash
MD5 00CB00F474739152D09008C728E92FC0
SHA1 01006DFA0940F1CD513D13343237E74DDAC80456
SHA256 5E1F67022E511362C7975943687228488CAB7C1CD7B615267F584C3467B39167
SHA384 45E5C52DA00FC30E712BA07F9EC5C513EBAEF6CFE6C0E7FB2E090C488750E7D1BA330123261AE432876800DD7AD869E2
SHA512 55A131DE02A939C277BF48D7DB09D3B52A986DA1066B14D3B3CFBEE264C33214576E71B91A02C1D896AD69686DC6E9E17C9A3E920EBABAE54A485F07311EF8CA
SSDEEP 1536:wex+U9F+LA/vqtUvelpsILvXo3nFrSQzQRJUnfc3BhKgupwU6Ha3H28aU+AVI:wlUn+A/rel5XYnFmQzNnfc3BsLpOHa3K
IMP 7F82E730DA9673E6947151FFE01E339A
PESHA1 2198C219A0B6C24C249167C88B448D83114F5F48
PE256 4DD7902C4842125D1E731D867B386A9ED97B0765D493D958B03DAA8CE762D505

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\WaaSMedicAgent.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WaasMedicAgent.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1320 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1320
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/5e1f67022e511362c7975943687228488cab7c1cd7b615267f584c3467b39167/detection

MIT License. Copyright (c) 2020-2021 Strontic.