psping.exe

  • File Path: C:\SysinternalsSuite\psping.exe
  • Description: PsPing - ping, latency, bandwidth measurement utility

Hashes

Type Hash
MD5 829BF469365FE504C673D8B7BE7D3436
SHA1 C4CCD065F6D551A01DE86599E36BF90390E101CD
SHA256 C8453110682D999223A84146462B0B4FC6979F40A01B60A7B925783B71B2D6FF
SHA384 2D38DB39F050F90F5E36F244219A1393119F6303E51D505B89E7BB065289219C7399CB83E1402455A90A1F8B3E58F569
SHA512 41FC66443CBEE4D6EA180EFE8E14FE5AA3FCBDD786CB3BDC416A837C807E46842EE5E9258490CAEA07739D55EF64EC189381152B32A27130C5C153CBEBD5CD27
SSDEEP 3072:V1y63csr3eyNV51ZausurQZfjW1IP5wtXsS+gIJZpgvWZcnvTFrLVnmfe+EF:V1bcsr3eyTZIyaP5csSz8Orpnnv
IMP 51E9E2ED7EB329B0306D3776C52D3ED0
PESHA1 07A4BA50D5AA425BCF11581723858619C7359D5B
PE256 82894137EFBB4727057FF6E050D917A1E3E13AF790AEFADA0DD59BCDB0168694

Runtime Data

Usage (stdout):


PsPing v2.10 - PsPing - ping, latency, bandwidth measurement utility
Copyright (C) 2012-2016 Mark Russinovich
Sysinternals - www.sysinternals.com

PsPing implements Ping functionality, TCP ping, UDP/TCP latency, and UDP / TCP
bandwidth measurement.

Help usage: psping -? [i|t|l|b]
   -? i   Usage for ICMP ping.
   -? t   Usage for TCP ping.
   -? l   Usage for latency test.
   -? b   Usage for bandwidth test.
  -nobanner   Do not display the startup banner and copyright message.

Usage (stderr):

The parameter is incorrect.
Invalid destination address:

Loaded Modules:

Path
C:\SysinternalsSuite\psping.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 330000010A2C79AED7797BA6AC00010000010A
  • Thumbprint: 3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC
  • Issuer: CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: psping.exe
  • Product Name: Sysinternals PsPing
  • Company Name: Sysinternals - www.sysinternals.com
  • File Version: 2.10
  • Product Version: 2.10
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 2012-2016 Mark Russinovich
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/c8453110682d999223a84146462b0b4fc6979f40a01b60a7b925783b71b2d6ff/detection/

Possible Misuse

The following table contains possible examples of psping.exe being misused. While psping.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_false_sysinternalsuite.yml - '\psping.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.