AuditShD.exe

  • File Path: C:\WINDOWS\system32\oobe\AuditShD.exe
  • Description: Audit Mode Desktop Switch Utility

Hashes

Type Hash
MD5 DE7377FF4091FC438529F5A96001F17C
SHA1 5C3CE15F71949D025A5D5A6045FD2425C056BE13
SHA256 036729F768FFB1C6C1C2D03BC631D92B3CBAE5BEAE9AE768D631C6A743E556C3
SHA384 A9DDE436C15F1B9D33C242CF745AAE803DBAA5E1E93E01853789563F5F6FB45C2B6B8961F70395E3083C22CD7D18D903
SHA512 456EED82380FF7D470C787313C29CC11C2951DF118F74362A65541EDF98A782651C8AE200BB80DBF70CA413D0FC2B0A9E7980BE0B98F8F4FED260E757B1B8339
SSDEEP 384:os3HNdQBct+n76FSjz0Zb1YiAxZNNv2Hbe3Jbg6XhjKOr3fpgHuWGfErnUoskdeL:BHNYHncYzMAxJyK3Xqe0ok2ejb

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AuditShD.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.207 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.207
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\oobe\AuditShD.exe 36
C:\Windows\system32\oobe\AuditShD.exe 38
C:\Windows\system32\oobe\AuditShD.exe 36
C:\WINDOWS\system32\oobe\AuditShD.exe 27
C:\windows\system32\oobe\AuditShD.exe 29
C:\Windows\system32\oobe\AuditShD.exe 40

MIT License. Copyright (c) 2020-2021 Strontic.