MultiDigiMon.exe

  • File Path: C:\Windows\system32\MultiDigiMon.exe
  • Description: Digitizer to Monitor Mapping Tool

Hashes

Type Hash
MD5 22E44F19E1150076CC57D13EA2AD1299
SHA1 DB28AFD7FB31AEB8DE3790582CD56CCE2B216F77
SHA256 104F7DDF72823F0516861BCD5E1D25D0617B9754AADFA24796404124DD120C42
SHA384 2D5D4ED6385D52C8DC52BEE6DAD790C07D61495B25AE5D7CAC7F37E0D5B1B0A37E9F37B7D85A4C9C7CF2A2715D51201C
SHA512 4ECD61FD5CAB6856EA5E507E42DC0E918BC8B3DCEF487C70E4FD966393767338FA1B7BDE647B1ADDF758788D2EFBB17EDC394945292673A1B1A05C15C90DFA0F
SSDEEP 768:EMQVwFkb1dyP82uHYSz+O7W1jNrJsgrrH1Xzij9V+//qdfdh22C+BH7sFpCKcKP:Va08j7+O7WDvrgV+/ydfW2jbJK
IMP E2B29DA5A898E5378D53FC923C78C72E
PESHA1 04EE5780D40EB6C73424DF95ADE64D8B30AD326E
PE256 35CA5A3D44EAA666B75B22DD394A71821797A5D3E5D2D0F7CB5AA5D8C100FEB1

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\IMM32.dll
C:\Windows\System32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\system32\MultiDigiMon.exe
C:\Windows\system32\NInput.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ole32.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\system32\uxtheme.dll
C:\Windows\System32\win32u.dll
C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.1518_none_de6e2bd0534e2567\COMCTL32.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MultiDigiMon.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/104f7ddf72823f0516861bcd5e1d25d0617b9754aadfa24796404124dd120c42/detection/

File Similarity (ssdeep match)

File Score
C:\windows\system32\MultiDigiMon.exe 52
C:\WINDOWS\system32\MultiDigiMon.exe 58
C:\Windows\system32\MultiDigiMon.exe 55
C:\Windows\system32\MultiDigiMon.exe 47
C:\Windows\system32\tabcal.exe 40
C:\Windows\system32\tabcal.exe 33
C:\windows\system32\tabcal.exe 38
C:\WINDOWS\system32\tabcal.exe 33
C:\Windows\system32\tabcal.exe 35

MIT License. Copyright (c) 2020-2021 Strontic.