EhStorAuthn.exe

  • File Path: C:\Windows\SysWOW64\EhStorAuthn.exe
  • Description: Microsoft Enhanced Storage Authentication Program

Hashes

Type Hash
MD5 0C9245FDD67B14B9E7FBEBB88C3A5E7F
SHA1 339AB7C897FC50930B29AFA0E6C11FBD1DED2E69
SHA256 DE0662EB81790FE9E872A5061BA088DA715D50156AAF1E2B0546E20892E05D8E
SHA384 602152BFE75F0892ADEBB4B3F664915DD25675215FE97BA443A25E32B4CD6975C693232D1296C95E930ECB99154D56ED
SHA512 F04F0E0856DEB528DF2DC2D728527297A8499028D962209AFAC1A9B9F502063D3AC9B9A537A9CA7A4C5C63898FABD1E3723CF2E2573F058111BEB55B8A1BB850
SSDEEP 1536:8qxyjSo/dX/n7HGYbsTfCHPeomgPHA5kG9mQ7N6wMkNaAYG5n8sRWy:QRdXTHFwKHPxPxQZDFcZIZ
IMP D8BEA4FEF46578B7424738F766C2A7CC
PESHA1 E99268FC6182C8300FB771B98F2B70379EAF0281
PE256 8070B31DDC33EC038495CBBABD277C11151E78F53431FEC52DE861F57044B46B

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\EhStorAuthn.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EhStorAuthn.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/de0662eb81790fe9e872a5061ba088da715d50156aaf1e2b0546e20892e05d8e/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\EhStorAuthn.exe 44
C:\windows\system32\EhStorAuthn.exe 57
C:\Windows\system32\EhStorAuthn.exe 54
C:\Windows\system32\EhStorAuthn.exe 50
C:\Windows\system32\EhStorAuthn.exe 49
C:\WINDOWS\system32\EhStorAuthn.exe 54
C:\Windows\system32\EhStorPwdMgr.dll 61
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 72
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 61
C:\Windows\SysWOW64\EhStorAuthn.exe 69
C:\Windows\SysWOW64\EhStorAuthn.exe 69
C:\Windows\SysWOW64\EhStorPwdMgr.dll 61

MIT License. Copyright (c) 2020-2021 Strontic.