iisrstas.exe

  • File Path: C:\Windows\system32\inetsrv\iisrstas.exe
  • Description: Internet Information Services reset control

Hashes

Type Hash
MD5 767B09A12F4E9432775E527321797D2A
SHA1 03DDF05DCBA592EF302D66FB842F7720DDC5E8B2
SHA256 818D9BE7DDC6F9363972771B39959A923A1AF92D4D9C90F2B5BD38366589E0E2
SHA384 B45CA37902C6F3ADCA67359DC162C95E01D4AF55B5ACB0D8D3B1FD9D26D37FA0362B21D876B40F449A20EF9C942D1A84
SHA512 99204F3CF32E39F495D1EFC6F29549F4611C0278B7FA44EBDAF62DAF0A0D1D4312362D5338B7F76D8BF6432A7DE54ABA200216C2E5DD1ED998EBEB9A86099944
SSDEEP 768:vZV9W7AepdMtzw6dWnfDgYZ0rAFyCgvKibmCPtXnHAzdEY4NPQ0iKlJQ:hbypOsXIbmyHAzeK/KlJQ

Runtime Data

Open Handles:

Path Type
(RW-) C:\Users\user\Documents File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\RPC Control\DSEC5A8 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: IISRSTAS.EXE
  • Product Name: Internet Information Services
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: Language Neutral
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.