WaaSMedicAgent.exe

  • File Path: C:\Windows\system32\WaaSMedicAgent.exe
  • Description: WaasMedic Agent Exe

Hashes

Type Hash
MD5 911D9D803989FA9D6BC44A25312DB06E
SHA1 B3CB6D9AFACFAE1FC1E3C20A461EAADE72EED4FB
SHA256 6E43FD39C25B6B216E8ACF72F8EF420B811506DFAF0E6F23E21F4708BE36F048
SHA384 6543A147D692374B18FBF9056B5449B87D48F756EF2243F43292755923C7694C2C8F15D6D933AAAA1E31D05895505289
SHA512 8072D76CAC207EBFAFF0BDC38CA7AE951A3049AA7641F1B0519999280DC6787E3576E224E4502DD9A529FAFDD0C42920EC01B5E4635BD8FC0E3006E9008D9F42
SSDEEP 1536:EZ+BrC19u2QuxXLyTaTa6nFOMIhpz7ifJfTfgTBXSXg55GS1a7jHi977:E0hC1c25JLO6nFkJ2fJrfgTBXEg5Z1aw
IMP 9DAE31EFDD1938D98CFED21A148FAC3B
PESHA1 D94C75A1C24BFED5B8FD84F7C7A80EDD298F5B45
PE256 DDB24616238179B251B428FB4B7262D52769DB539329BB5CEBF81D5DC2BB1108

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\WaaSMedicAgent.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WaasMedicAgent.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.662 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.662
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/6e43fd39c25b6b216e8acf72f8ef420b811506dfaf0e6f23e21f4708be36f048/detection

MIT License. Copyright (c) 2020-2021 Strontic.