AuditShD.exe

  • File Path: C:\Windows\system32\oobe\AuditShD.exe
  • Description: Audit Mode Desktop Switch Utility

Hashes

Type Hash
MD5 2404E60A42629FD1242DE3EE440C9AB0
SHA1 99C7BCC0B11FD49FE90EBFEAA42DA75DE2CD7873
SHA256 AC9284E17FEB93F313FA31B5B62CF6E6743F0DF3797C3D513E6FD3E55382115F
SHA384 DB6BC6BA6F9AACC251B9174CE504FC1072C38F2D583267AF24AB2EC2CDEFB7CAECD1BF8BD3B33F3D4C1581ADD2296FF2
SHA512 73CFFE43D1E516AE256B5A6E8BA8B45BD7B29CA00EBA7752D2B9B7E845C2B091FC1547C8B42411C10D62A42929E7E4134AAF5BDA4F2D23B0CD422F046A1D4CFE
SSDEEP 384:j/5LaX/4UEmZrsu/ZoajJGDuyHWBSTe0nEkKhGwOr3fpgHuWGfErnUoskBR4ogg+:xagKrswVeGS/Do4ojPvX
IMP 07BD07129FA2DAD62B0A7258CB241DE5
PESHA1 2AE4068034B90DA4440CEDA2D1DD5EB9C01EDF86
PE256 E95CF725FD50C456D4C5B53FBEA41DDA48A9D8109123FDFDBF54B30FD26C32B0

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AuditShD.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/ac9284e17feb93f313fa31b5b62cf6e6743f0df3797c3d513e6fd3e55382115f/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\oobe\AuditShD.exe 35
C:\Windows\system32\oobe\AuditShD.exe 38
C:\WINDOWS\system32\oobe\AuditShD.exe 27
C:\windows\system32\oobe\AuditShD.exe 32
C:\WINDOWS\system32\oobe\AuditShD.exe 38
C:\Windows\system32\oobe\AuditShD.exe 38

MIT License. Copyright (c) 2020-2021 Strontic.