FileHistory.exe

  • File Path: C:\WINDOWS\system32\FileHistory.exe
  • Description: File History

Screenshot

FileHistory.exe

Hashes

Type Hash
MD5 154C634AC5FCC1AC49FC189D1308FF26
SHA1 5969AB2DCE34A0A7621BBF294A4175AB4BE65509
SHA256 BB57D7E4C140288EA7AF30F54F2B825D24FF6951213463AA5526B87F7CB55B67
SHA384 D20094338B1A67DCCD138DB39B5C6602A9F03221B33A4BC08873D936B892D2581C2104D00A1A2246599B71F9C3F89530
SHA512 1734455A15F224F9AF60928ED642E959C6536FC628DE29BC4D0151C2273A582AFE45739E3C72F352117142F65679C7ED05099F52058A654346D6B5EDDEAE559D
SSDEEP 3072:xQcs1zDy8+pSfrasB03w6VD7xvxzYuVD8C+cxICGQWnEcEgMobdmyTVulAyXD0N:Gcs3IvxzYuVD8CnxICGJn+jobd

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: FileHistory.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\FileHistory.exe 77
C:\WINDOWS\system32\FileHistory.exe 69
C:\Windows\system32\FileHistory.exe 79

Possible Misuse

The following table contains possible examples of FileHistory.exe being misused. While FileHistory.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .FileHistory.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.