appcmd.exe
- File Path:
C:\Windows\system32\inetsrv\appcmd.exe
- Description: Application Server Command Line Admin Tool
Hashes
Type |
Hash |
MD5 |
055B2B09409F980BF9B5A3969D01E5B2 |
SHA1 |
D9F829F298076A5F6E509755D297B94982D0F86B |
SHA256 |
60227991C5461FB4FA693ED8B70C85214D6A10ED753A35CDBBA9056A5E1D6A3F |
SHA384 |
67433102839EDADD3E17959C93AA61A4FC085F39EDA06667CFA2570650C23F8A2B5F8CE19FBD665BB2B973FAA8A23A08 |
SHA512 |
1A8A883B01466D2255B87E1E65E6FAF7D6797E49357532B4E959719DE467DEAFA33C32D240B92D18979605A4238C8AB85A5C38720448E56CEB495C458784A2A0 |
SSDEEP |
3072:IQ2D0Zs/FXeGFjF6fsKaqAzSBpcUz82/ZF2otKFiM:IDaMFrFjF67aqcFi |
Runtime Data
Usage (stdout):
General purpose IIS command line administration tool.
APPCMD (command) (object-type) <identifier> </parameter1:value1 ...>
Supported object types:
SITE Administration of virtual sites
APP Administration of applications
VDIR Administration of virtual directories
APPPOOL Administration of application pools
CONFIG Administration of general configuration sections
WP Administration of worker processes
REQUEST Administration of HTTP requests
MODULE Administration of server modules
BACKUP Administration of server configuration backups
TRACE Working with failed request trace logs
BINDING Object for working with SSL bindings
(To list commands supported by each object use /?, e.g. 'appcmd.exe site /?')
General parameters:
/? Display context-sensitive help message.
/text<:value> Generate output in text format (default).
/text:* shows all object properties in detail view.
/text:<attribute> shows the value of the specified
attribute for each object.
/xml Generate output in XML format.
Use this to produce output that can be sent to another
command running in /in mode.
/in or - Read and operate on XML input from standard input.
Use this to operate on input produced by another
command running in /xml mode.
/config<:*> Show configuration for displayed objects.
/config:* also includes inherited configuration.
/metadata Show configuration metadata when displaying configuration.
/commit Set config path where configuration changes are saved.
Can specify either a specific configuration path, "site",
"app", "parent", or "url" to save to the appropriate portion
of the path being edited by the command, "apphost", "webroot",
or "machine" for the corresponding configuration level.
/apphostconfig Specify an alternate applicationHost.config file to edit.
/debug Show debugging information for command execution.
Use "!" to escape parameters that have same names as the general parameters,
like "/!debug:value" to set a config property named "debug".
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: appcmd.exe.mui
- Product Name: Internet Information Services
- Company Name: Microsoft Corporation
- File Version: 10.0.14393.0 (rs1_release.160715-1616)
- Product Version: 10.0.14393.0
- Language: Language Neutral
- Legal Copyright: Microsoft Corporation. All rights reserved.
File Similarity (ssdeep match)
Possible Misuse
The following table contains possible examples of appcmd.exe
being misused. While appcmd.exe
is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
MIT License. Copyright (c) 2020-2021 Strontic.