home

WsTraceUtil.exe

Windows Web Services API Trace Utility Tool

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Windows Web Services API Trace Utility Tool

Version:
6.3.9431.0 (winmain_bluemp.130615-1214)

MD5:
101ba9c9bf19b4b9f98c9e11f17cfced

SHA-1:
2f6823473332f02593f23e93bbe46a2834762191

SHA-256:
49ca936686a145419b0af744bb743ee54f169a0726a9094f975a2e4fb22b82ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 2:37:39 AM UTC  (today)

File size:
93.5 KB (95,752 bytes)

Product version:
6.3.9431.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WsTraceUtil.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\windows kits\8.1\bin\arm\wstraceutil.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/17/2012 2:31:27 PM

Valid to:
3/17/2014 3:31:27 PM

Subject:
CN=Microsoft Windows Kits Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000002167711851029B91B2000000000021

File PE Metadata
Compilation timestamp:
6/15/2013 3:32:32 PM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
1536:xCV+XJ39VqUFPcfeesBIYWGnmNugIHI4+GvEtjgBdlbEIv1:xCV+XNqqE8GYvS3GDRB1

Entry address:
0x70FD

Entry point:
E9, 00, 48, EB, 46, 01, F0, CF, FE, FF, F7, 2F, FF, BD, E8, 00, 88, 00, 00, 2D, E9, 70, 48, 0D, F1, 0C, 0B, 8B, B0, 14, 46, 1E, 46, 05, 46, 6C, B9, 01, F0, F9, FE, 16, 23, 03, 60, 00, 23, 00, 22, 00, 21, 00, 20, 00, 93, 01, F0, 58, FF, 6F, F0, 00, 04, 33, E0, 09, B1, 00, 2D, EE, D0, 42, 23, 05, 93, 6F, F0, 40, 43, 99, 42, 04, 95, 02, 95, 02, D9, 6F, F0, 00, 43, 00, E0, 4B, 00, 03, 93, 10, 9B, 02, A8, 32, 46, 21, 46, 01, F0, 95, FF, 04, 46, DD, B1, 03, 9B, 00, 25, 5B, 1E, 03, 93, 00, 2B, 05, DB, 02, 9B, 1D...
 
[+]

Entropy:
6.4300

Packer / compiler:
Xtreme-Protector v1.05

Code size:
67 KB (68,608 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.