wbemtest.exe
- File Path:
C:\WINDOWS\system32\wbem\wbemtest.exe
- Description: WMI Test Tool
Screenshot
Hashes
Type | Hash |
---|---|
MD5 | 2FB525CA9EA127D2BF4A446CF9E6307F |
SHA1 | C433D83E3996A42C8FC843CCA68290B40A34D763 |
SHA256 | D76895F19CB1A4B711556EF7F6C8257CD854F08D6510030B1304C3712285779C |
SHA384 | F773D588D549DD4F9FAC77AAD7EA1C6C1A8D9192E4D926DA38A83CC4C0294D492427FF692C926CC90F308BB3D42A4C1A |
SHA512 | 767F2F67A67222CFBA8DC3B9D04D639F6827D5B031E64C89E3476C92DC768538A2699A50B9E229852BBBF5F48534CD32C0E1A6566655A36138AEBB6F61954998 |
SSDEEP | 6144:k0NmSdxN4o9x05hwYdQrcuYp7hMvWDeP:k0BeUxkhwYdpuYpu28 |
IMP | BB4301F454CFD6479E129F44172275FD |
PESHA1 | 72DC818384712FE45B37A34757904124B5A428D6 |
PE256 | 46F7D7E4525194D571BA629C13914B717882E65B7F79D67BEA77F3D6A5DCD8C1 |
Runtime Data
Window Title:
Windows Management Instrumentation Tester
Open Handles:
Path | Type |
---|---|
(R-D) C:\Windows\Fonts\StaticCache.dat | File |
(R-D) C:\Windows\System32\en-US\user32.dll.mui | File |
(R-D) C:\Windows\System32\wbem\en-US\wbemtest.exe.mui | File |
(RW-) C:\Windows\System32 | File |
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467 | File |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro | Section |
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
\Sessions\2\Windows\Theme1077709572 | Section |
\Windows\Theme3461253685 | Section |
Loaded Modules:
Path |
---|
C:\WINDOWS\System32\combase.dll |
C:\WINDOWS\System32\GDI32.dll |
C:\WINDOWS\System32\gdi32full.dll |
C:\WINDOWS\System32\IMM32.DLL |
C:\WINDOWS\System32\KERNEL32.DLL |
C:\WINDOWS\System32\KERNELBASE.dll |
C:\WINDOWS\System32\MSCTF.dll |
C:\WINDOWS\System32\msvcp_win.dll |
C:\WINDOWS\System32\msvcrt.dll |
C:\WINDOWS\SYSTEM32\ntdll.dll |
C:\WINDOWS\System32\ole32.dll |
C:\WINDOWS\System32\OLEAUT32.dll |
C:\WINDOWS\System32\RPCRT4.dll |
C:\WINDOWS\System32\ucrtbase.dll |
C:\WINDOWS\System32\USER32.dll |
C:\WINDOWS\system32\uxtheme.dll |
C:\WINDOWS\system32\wbem\wbemtest.exe |
C:\WINDOWS\SYSTEM32\wbemcomn.dll |
C:\WINDOWS\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: wbemtest.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/d76895f19cb1a4b711556ef7f6c8257cd854f08d6510030b1304c3712285779c/detection
MIT License. Copyright (c) 2020-2021 Strontic.