AuditShD.exe

  • File Path: C:\WINDOWS\system32\oobe\AuditShD.exe
  • Description: Audit Mode Desktop Switch Utility

Hashes

Type Hash
MD5 BE4EA9F21F11C79A423D0A3016C886F2
SHA1 A89F51974DF34027AE8A4B9398AED49BEFD8C7FA
SHA256 586C8A68640FA836D8A1AC8FDB7D361A598A1CB3ED277812F4E68061194215A0
SHA384 8B5117D745D6C0B71113E4C76D0402DD6CEEA23E4D883C7FDC696019BB209A3D2426C24FF5B1D99C29FE7BEBDB987D41
SHA512 24014D7069DF25954E5F017D15CC642E19E0E2115D1175C3D23D2A27B3F0C02039D03DD528E7C668D94299DB56EB4CEC5301AAA9ED5913CE2D0240FCA688D32B
SSDEEP 384:B6Ts311T476i4vRrM/aTOCBatgbLWnEKwKopxnSxv8p48mv5GQe/oLFOr3fpgHuZ:Yglm7F/aTvBQgffZU8p48X8UFpf5S
IMP C10661DE73ACB1352ADCA37C3914506E
PESHA1 21060FC08469161010FB2470E039F4DE21BA19FE
PE256 CA0B31175345166F34D81BE2725BB8BE48EB612A2CD1BAE2B1E1A8A0CF1E1007

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AuditShD.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.282 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.282
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/586c8a68640fa836d8a1ac8fdb7d361a598a1cb3ed277812f4e68061194215a0/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\oobe\AuditShD.exe 25
C:\Windows\system32\oobe\AuditShD.exe 27
C:\WINDOWS\system32\oobe\AuditShD.exe 27
C:\Windows\system32\oobe\AuditShD.exe 24

MIT License. Copyright (c) 2020-2021 Strontic.