sftp.exe

  • File Path: C:\Windows\system32\OpenSSH\sftp.exe

Hashes

Type Hash
MD5 028093CC65E2E42EFC5AE37F030AA164
SHA1 A83C9DE27D43CFB56E827F693B05171B858D0256
SHA256 7651A9E5721C2FCEE4C34A253062914AB93C7B3B415D313658B058AED4F2FDE2
SHA384 00D63179BAC48B234A018CC9625CF6A5C613BB9C2DA1BD37CD2ED9F8FD1205BF04B61F38A13EF92BF06EADAAC54ED623
SHA512 1416021F7B0D8E96AC1B581119B79E80E20404884C8FA12272A26181F6FC522B136820EEC79CE96690088EF00DAD2B4E31717CC6BF1B38DD914E0D79D281B679
SSDEEP 6144:pqTjTw9mPw0bLaPpV+y9h+jdi2qAYE4/GgcKuzxywdrHGlUTONZJVxrgZmlx4Cjh:pqrw9mPw0bLaXb9h+Mh84/Gggx5AVx8o
IMP F439E59D3BD1D28D6ABD4CCFCBD7AEB9
PESHA1 385D96EFFA0CD4556681D8954E4AFF8D5AA2CEE4
PE256 78DD7947388404E221A3B52DD54DBAE34172BB25441D480BF13B7AA2CDDCB068

Runtime Data

Usage (stderr):

unknown option -- -
usage: sftp [-46aCfpqrv] [-B buffer_size] [-b batchfile] [-c cipher]
          [-D sftp_server_path] [-F ssh_config] [-i identity_file] [-l limit]
          [-o ssh_option] [-P port] [-R num_requests] [-S program]
          [-s subsystem | sftp_server] destination

Child Processes:

conhost.exe ssh.exe

Open Handles:

Path Type
(RW-) C:\Users\user File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\OpenSSH\sftp.exe

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename:
  • Product Name: OpenSSH for Windows
  • Company Name:
  • File Version: 7.7.2.1
  • Product Version: OpenSSH_7.7p1 for Windows
  • Language: English (United States)
  • Legal Copyright:
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/7651a9e5721c2fcee4c34a253062914ab93c7b3b415d313658b058aed4f2fde2/detection

MIT License. Copyright (c) 2020-2021 Strontic.