FileHistory.exe
- File Path:
C:\WINDOWS\system32\FileHistory.exe - Description: File History
Screenshot
Hashes
| Type | Hash |
|---|---|
| MD5 | 154C634AC5FCC1AC49FC189D1308FF26 |
| SHA1 | 5969AB2DCE34A0A7621BBF294A4175AB4BE65509 |
| SHA256 | BB57D7E4C140288EA7AF30F54F2B825D24FF6951213463AA5526B87F7CB55B67 |
| SHA384 | D20094338B1A67DCCD138DB39B5C6602A9F03221B33A4BC08873D936B892D2581C2104D00A1A2246599B71F9C3F89530 |
| SHA512 | 1734455A15F224F9AF60928ED642E959C6536FC628DE29BC4D0151C2273A582AFE45739E3C72F352117142F65679C7ED05099F52058A654346D6B5EDDEAE559D |
| SSDEEP | 3072:xQcs1zDy8+pSfrasB03w6VD7xvxzYuVD8C+cxICGQWnEcEgMobdmyTVulAyXD0N:Gcs3IvxzYuVD8CnxICGJn+jobd |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266 - Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: FileHistory.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.18362.1 (WinBuild.160101.0800)
- Product Version: 10.0.18362.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
File Similarity (ssdeep match)
| File | Score |
|---|---|
| C:\Windows\system32\FileHistory.exe | 77 |
| C:\WINDOWS\system32\FileHistory.exe | 69 |
| C:\Windows\system32\FileHistory.exe | 79 |
Possible Misuse
The following table contains possible examples of FileHistory.exe being misused. While FileHistory.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
| Source | Source File | Example | License |
|---|---|---|---|
| malware-ioc | nukesped_lazarus | .FileHistory.exe``{:.highlight .language-cmhg} |
© ESET 2014-2018 |
MIT License. Copyright (c) 2020-2021 Strontic.