EhStorAuthn.exe

  • File Path: C:\Windows\system32\EhStorAuthn.exe
  • Description: Microsoft Enhanced Storage Authentication Program

Hashes

Type Hash
MD5 9657C921DC6703DE71288C1BE50A7826
SHA1 2D1DD4B8ABBED219FDD9938144284E75F13F8396
SHA256 F7A1ACF775987523B769F2C5E389BC0B6BCB2DC8D80B3EA0F76C1014E824B3C1
SHA384 03505CCD8F77A73B71BE964DEDEA07991421FF3AA271BF0B93850A4397C2F2A61B3E3BACDD77268F6946B861FC421F40
SHA512 2207E351704909B6C84661A8BACEECAA48F6053C3F2885143EC288547378B45E1DD1A6D199995F1CC146DE13EE06B47215087169AC0102577A0A325519679A86
SSDEEP 1536:/tUJVgNnVqfBDkNe0XZ28Pmj/YQq2hKxyy2L5IIw0oeomgPHA5kG9mQ7N6wMkNaA:/+yqfBD18uTzvPL2b0oxPxQZDFcZIZR
IMP 781D28469BB74D268EAF05BBBB5DA822
PESHA1 039E2D537239AF4637574BD4C30E6382D9932E89
PE256 02789E2544FCD31E50A376F51835E0A9F7938AABB900FB9F3149D3C96EC89CC9

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EhStorAuthn.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/f7a1acf775987523b769f2c5e389bc0b6bcb2dc8d80b3ea0f76c1014e824b3c1/detection/

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\EhStorAuthn.exe 41
C:\windows\system32\EhStorAuthn.exe 46
C:\Windows\system32\EhStorAuthn.exe 46
C:\Windows\system32\EhStorAuthn.exe 46
C:\WINDOWS\system32\EhStorAuthn.exe 55
C:\Windows\system32\EhStorPwdMgr.dll 54
C:\Windows\SysWOW64\EhStorAuthn.exe 50
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 49
C:\WINDOWS\SysWOW64\EhStorAuthn.exe 49
C:\Windows\SysWOW64\EhStorAuthn.exe 50
C:\Windows\SysWOW64\EhStorAuthn.exe 54
C:\Windows\SysWOW64\EhStorPwdMgr.dll 52

MIT License. Copyright (c) 2020-2021 Strontic.