EhStorAuthn.exe

  • File Path: C:\WINDOWS\SysWOW64\EhStorAuthn.exe
  • Description: Microsoft Enhanced Storage Authentication Program

Hashes

Type Hash
MD5 78CAAB6EAD9D6F6CF03E4484AEFD0186
SHA1 8EE29D3ED4CE95693D9646EAD052A4C5C4222AC8
SHA256 65AA5D728A529C6E5D80B35EFA872DB1775C1D9631E9F69777473F2B519FD945
SHA384 4A17B511894873FA5E8E5AD0237B4F90194433BDFE76120942DA6D156FA8837FFC41268C1D3CAE4AF046D19855822389
SHA512 D34F39EFA8590FAB9C53FAC464B4129FAA001588CE594B800871B14DA8C34F8EAE7419FFB2108B396DEE0A6FCBA13B8F56439324AC1C3AC3B2513CC2B8ABF3FF
SSDEEP 1536:kqxycIk6lO2QLOJR7D+D5FAKVfCgUeomgPHA5kG9mQ7N6wMkNaAYG5n8sHr:LcO2QLOGDAmKgUxPxQZDFcZIZH
IMP D8BEA4FEF46578B7424738F766C2A7CC
PESHA1 55D706BE5F70B9FAC708FC3F23BD29783A8FA00D
PE256 9997FAB617E8065B663C97F63CAB5B8BB0D73593F1F544F19BA1B7452A3DF1AF

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\EhStorAuthn.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EhStorAuthn.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/65aa5d728a529c6e5d80b35efa872db1775c1d9631e9f69777473f2b519fd945/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\EhStorAuthn.exe 54
C:\windows\system32\EhStorAuthn.exe 58
C:\Windows\system32\EhStorAuthn.exe 55
C:\Windows\system32\EhStorAuthn.exe 49
C:\Windows\system32\EhStorAuthn.exe 46
C:\WINDOWS\system32\EhStorAuthn.exe 49
C:\Windows\system32\EhStorPwdMgr.dll 60
C:\Windows\SysWOW64\EhStorAuthn.exe 61
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 71
C:\Windows\SysWOW64\EhStorAuthn.exe 63
C:\Windows\SysWOW64\EhStorAuthn.exe 65
C:\Windows\SysWOW64\EhStorPwdMgr.dll 60

MIT License. Copyright (c) 2020-2021 Strontic.