wsdcodegen.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\wsdcodegen.exe
  • Description:

Hashes

Type Hash
MD5 E0C608F112BD3ADBFABF3C415D65D23F
SHA1 28C42C611CDFEFE7A104A8AAC4E6301AC7F691C0
SHA256 E8FF75147176B7C2055ACCB8AE03871EC1CB485DC76D4C934201D4753010A56B
SHA384 4AD224E13676B77D44AEA1F01FB3A20C38C73158CC98B95CAA572C0D773D775158489C9943F4F686D1DDB2D8B22E516F
SHA512 FC63A17AA2FA35CF0348E248870B93C33F5A62833E5AF0A78FC5EDC5A7EAE5C8A35B1907F7025E49F602A732B05A5AB5CA94BC7A549FA003EBF289742412B897
SSDEEP 3072:BYr/PHkl/UDAjQFRBMsoy4gfs5xw6R63gDWBxFbG+NX:GPEjjuB8y4bO3gD
PESHA1 40DF2773C6E2FFA9729F23D86BFF57E10195E51F
PE256 9D69AAE928FB75F91E890A63C4F2BB098AEC13F621189D12BC2DE6EC303BA129

Runtime Data

Child Processes:

Fondue.exe

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\wsdcodegen.exe
C:\Windows\System32\KERNEL32.dll
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\MSCOREE.DLL
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WsdCodeGen.exe
  • Product Name: Microsoft (R) Windows (R) Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1
  • Product Version: 10.0.19041.1
  • Language: Language Neutral
  • Legal Copyright: Copyright (c) Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\wsdcodegen.exe 88

MIT License. Copyright (c) 2020-2021 Strontic.