AuditShD.exe

  • File Path: C:\windows\system32\oobe\AuditShD.exe
  • Description: Audit Mode Desktop Switch Utility

Hashes

Type Hash
MD5 D0A1F92B3EE9A1BACB8A00B7039BB8BB
SHA1 4D255D73BC5CD3A752442D7470BEA0F4A004FFC4
SHA256 5516375C7BF9F770FC3C31863A9BF217E098E8E45ECBD93464616B458F1B7F35
SHA384 BDDADDABB4D83D4F7237F3890E78484532691C7AD10AA39F3D7CF1C41606304C1411656F4F9CACDDC36DE8D4F7582074
SHA512 303215A635215E6201D354FFF3DAC820B34CAF076B9C3878B4EAE41B37D4C84146020105F67F721341DC1ECC11591C95C059B0ABC464A0239E2841E88A21B307
SSDEEP 384:NAOrR3fpgHuWGfErnssk1DgRKk4ySJwwuoGE29PC6r0y+w9mb5Hu9uI30qbiSjSa:MRP4goHs+r1I0qPw9VboCJvwaJKi

Signature

  • Status: The file C:\windows\system32\oobe\AuditShD.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: AuditShD.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.17415 (winblue_r4.141028-1500)
  • Product Version: 6.3.9600.17415
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\oobe\AuditShD.exe 24
C:\Windows\system32\oobe\AuditShD.exe 32
C:\Windows\system32\oobe\AuditShD.exe 27
C:\WINDOWS\system32\oobe\AuditShD.exe 29
C:\Windows\system32\oobe\AuditShD.exe 27

MIT License. Copyright (c) 2020-2021 Strontic.