WaaSMedicAgent.exe

  • File Path: C:\WINDOWS\system32\WaaSMedicAgent.exe
  • Description: WaasMedic Agent Exe

Hashes

Type Hash
MD5 09521B5C530593C7AE6909D2FA34E05F
SHA1 8BB8E9BA4355B5536FAE8DB055F80757EA3C07EE
SHA256 8AD048DA59E20848E7F1DFA95ECE91999DC01998976EE1B541D5D11C176E9825
SHA384 B90A5B36BFA963265A4D0A4F798E2E4816ED774719E1C644EFFE8CA40A159CDEC431003AC61CDD40501F2C91F44306F1
SHA512 B85827F17DAF9C1A56D6EDF75D1724B22340729BBBC5045B870457AFDF6AF065B6437E309CBCA5E48AADC6C722E9F77BC7792E7665DFADE509A5173EC241EFB4
SSDEEP 3072:pZpchOBvam0SYAfBWrX4YF+YfFBUorBxaiigK:TwOBvOSYASXjBFi
IMP 6AAC6FDEB75E8C96C6A4F0834A2E63DC
PESHA1 9FB6FF79F9D2F58F1F80E8EAB1879FD35E9496B6
PE256 73CB4374985494BCDE30627D460208BDFFBFE0E73E62BADE9BB168F0662AAD28

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\WaaSMedicAgent.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WaasMedicAgent.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.132 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.132
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/8ad048da59e20848e7f1dfa95ece91999dc01998976ee1b541d5d11c176e9825/detection

MIT License. Copyright (c) 2020-2021 Strontic.