InputSwitchToastHandler.exe

  • File Path: C:\Windows\SysWOW64\InputSwitchToastHandler.exe
  • Description: Input Switch Toast Handler

Hashes

Type Hash
MD5 BE00D803E4E2B5A19C3E8AECC42C8727
SHA1 53E26E8B0C7145BD85E37A727A60313BFF7703C8
SHA256 977E71C9547055DB4A0814971D85C5B0FAAF8A5BE529AF55FA60B4E67417131E
SHA384 466B9163866CC5737248DDF2D78B35B4D11E395DC25D24B5685FD4E49580121D5615D501B34C777932F6E144A9CFAC2C
SHA512 6310773396B78B3288707D88D26D6FFE4D4AE3462EC5D84AEF6352AF5B81E087D8CFF79D08DDA1065E6978B84B29EFB26AA150A1F3DE45A42C85ECB6B26C1B32
SSDEEP 768:Dhk1gAl2Ty7WCKe7O+5QgAK2x1ZuwmCSpIFjBy9RFASViJM0u3stSPeU04Rg:De1gAl2TWhddA7PZ5Sp0CzvViJLi
IMP 8767FC78CB0E7522A525CB603CC3A06F
PESHA1 F1685A5E8F01803866532BE2FBCFE51BD2CCB460
PE256 B9F128B53FB81E2D645C5AC36D8AD10D24A7D8CDAE2A2E26433B770C03692642

Runtime Data

Child Processes:

conhost.exe

Open Handles:

Path Type
(RW-) C:\Users\user File
(RW-) C:\Windows File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\InputSwitchToastHandler.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: InputSwitchToastHandler.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/977e71c9547055db4a0814971d85c5b0faaf8a5be529af55fa60b4e67417131e/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\SysWOW64\InputSwitchToastHandler.exe 41
C:\Windows\SysWOW64\InputSwitchToastHandler.exe 47

MIT License. Copyright (c) 2020-2021 Strontic.