- File Path:
C:\WINDOWS\SysWOW64\InputSwitchToastHandler.exe
- Description: Input Switch Toast Handler
Hashes
| Type |
Hash |
| MD5 |
B08530C0EBD8329BF55098E43679C63F |
| SHA1 |
118DF2CDD02976C9E5B4FC99157A01537189D969 |
| SHA256 |
A965669E947B0DE37BBA710B26E8F3939550E49872B9FA8F1CD5A807044DF6A5 |
| SHA384 |
18DADA0D8FC6D25FD3866984FDEE4E802E2EA454DE48E8AF250EBC1AD65C1E41A1C6DFC08715EBE2B32D4474C8AB2006 |
| SHA512 |
16AB8C2B1D66D990D1669280C82895D004221644CF8E8EC5921A7D7C2BCA36A704F89B96163BCD7B307F07B310E6E329799E4E060C9C532DFD798CBA28C26BDF |
| SSDEEP |
1536:C3JaWcOe18p055wPMpp8FngYpyyfwnkLiG:uc4pQyPMppWcy4ni |
| IMP |
1554EA0A967AD71061206248484D82E9 |
| PESHA1 |
622A9393CF4CAA5BCEAA91C4703850711583C7E5 |
| PE256 |
C4F9E6DF9529E6BDE92153188F2FF39344C8E58F5C517A26D657BDCA0056F90D |
Runtime Data
Child Processes:
conhost.exe
Open Handles:
| Path |
Type |
| (RW-) C:\Windows |
File |
| (RW-) C:\Windows\SysWOW64 |
File |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro |
Section |
| \Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
Loaded Modules:
| Path |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\System32\wow64.dll |
| C:\WINDOWS\System32\wow64base.dll |
| C:\WINDOWS\System32\wow64con.dll |
| C:\WINDOWS\System32\wow64cpu.dll |
| C:\WINDOWS\System32\wow64win.dll |
| C:\WINDOWS\SysWOW64\InputSwitchToastHandler.exe |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: InputSwitchToastHandler.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.37 (WinBuild.160101.0800)
- Product Version: 10.0.22000.37
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/a965669e947b0de37bba710b26e8f3939550e49872b9fa8f1cd5a807044df6a5/detection
MIT License. Copyright (c) 2020-2021 Strontic.