splunk-wmi.exe

  • File Path: C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe
  • Description: Remote Performance monitor using WMI

Hashes

Type Hash
MD5 DA1D389A14F7249375A36B2C4F7036CD
SHA1 985E153BC5AA2127F96FE2C014B8C5CBF0DA7FDA
SHA256 B2939E9D6CDFE8CD516DC29E539737334B6FA883F31D0D17A6B50ADA956BDC76
SHA384 017ED6BBF261537927CF9CD42880DE1D4022B8DE675579AB9A6C4390498C98E4ADA8CE35566815387045C9A85069D3B4
SHA512 4C4BB71016C806A5F05DE30037C239E44484186803EFAF9067E94769044F1D9E126F27D95A6649997A9BBD516B3490A7920466F5EC34039FD5112F91E4EADB2E
SSDEEP 196608:GJp9e8ybkIpcMFKRhxsy5WWlDUYmveqGl7FzXAxR0m2KdU9:s08ybkNRRhxsyUWqYtALdU9
IMP B93C7B1A01AE4E8C3FA69FD9F2A758E7
PESHA1 EB65B00D0E31265B418FC0E5D5E45CB8A5A72154
PE256 D637D109F161E72436D586083848C973AB67671E7F70DAFACF850C8ECC2B3431

Runtime Data

Usage (stderr):

usage:
 C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe [-run-until-pid-dies PID]|[-die-when-pid-dies PID]
 C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe  -wql WQL [-namespace namespc] [-watch]
 C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe  -loglist logchan1[,logchan2...] [-server srv1[,srv2...]] [-watch]

Loaded Modules:

Path
C:\Program Files\SplunkUniversalForwarder\bin\splunk-wmi.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 014E132916D610BB301B22ABBD994616
  • Thumbprint: B8B4F0D3FD0571E184DEBB76A1F6DB73F30FA233
  • Issuer: CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US
  • Subject: CN=”Splunk, Inc.”, O=”Splunk, Inc.”, L=San Francisco, S=California, C=US, SERIALNUMBER=4109614, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

File Metadata

  • Original Filename: splunk-wmi.exe
  • Product Name: splunk Application
  • Company Name: Splunk Inc.
  • File Version: 8.2.3
  • Product Version: 8.2.3 (Build cd0848707637)
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 2005-2021
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

MIT License. Copyright (c) 2020-2021 Strontic.