wbemtest.exe

  • File Path: C:\WINDOWS\system32\wbem\wbemtest.exe
  • Description: WMI Test Tool

Screenshot

wbemtest.exe wbemtest.exe

Hashes

Type Hash
MD5 2FB525CA9EA127D2BF4A446CF9E6307F
SHA1 C433D83E3996A42C8FC843CCA68290B40A34D763
SHA256 D76895F19CB1A4B711556EF7F6C8257CD854F08D6510030B1304C3712285779C
SHA384 F773D588D549DD4F9FAC77AAD7EA1C6C1A8D9192E4D926DA38A83CC4C0294D492427FF692C926CC90F308BB3D42A4C1A
SHA512 767F2F67A67222CFBA8DC3B9D04D639F6827D5B031E64C89E3476C92DC768538A2699A50B9E229852BBBF5F48534CD32C0E1A6566655A36138AEBB6F61954998
SSDEEP 6144:k0NmSdxN4o9x05hwYdQrcuYp7hMvWDeP:k0BeUxkhwYdpuYpu28
IMP BB4301F454CFD6479E129F44172275FD
PESHA1 72DC818384712FE45B37A34757904124B5A428D6
PE256 46F7D7E4525194D571BA629C13914B717882E65B7F79D67BEA77F3D6A5DCD8C1

Runtime Data

Window Title:

Windows Management Instrumentation Tester

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\user32.dll.mui File
(R-D) C:\Windows\System32\wbem\en-US\wbemtest.exe.mui File
(RW-) C:\Windows\System32 File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467 File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme1077709572 Section
\Windows\Theme3461253685 Section

Loaded Modules:

Path
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\GDI32.dll
C:\WINDOWS\System32\gdi32full.dll
C:\WINDOWS\System32\IMM32.DLL
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\MSCTF.dll
C:\WINDOWS\System32\msvcp_win.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\ole32.dll
C:\WINDOWS\System32\OLEAUT32.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\System32\USER32.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\wbem\wbemtest.exe
C:\WINDOWS\SYSTEM32\wbemcomn.dll
C:\WINDOWS\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: wbemtest.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/d76895f19cb1a4b711556ef7f6c8257cd854f08d6510030b1304c3712285779c/detection

MIT License. Copyright (c) 2020-2021 Strontic.