chgusr.exe

  • File Path: C:\WINDOWS\system32\chgusr.exe
  • Description: Change INI File Mapping Utility

Hashes

Type Hash
MD5 DF4F3F4B59FC7198AC410920B5332E71
SHA1 FAD543BF2C1291F08F2BA908AD605F666C38FD95
SHA256 F7BE88E8869B9D252FC52BA6FAD6ACDD9946AAE226F1DB35309E8F7DB64AD6CE
SHA384 0F658C319AD461FBF11E7A4C7BFD3ED5A75E87643DEC4106610514CD7B9DC7EF7A5BB7CA738D0750D637389A4DF582E0
SHA512 8FFAEE653C1C2FA24260440C0F3939F2CD300B8FC33C876EBAB70748D0D734E8753B8BC3750664C7A0FAA847E86C186B764DD36235ADB8CE7872FBDE3B6DC7FA
SSDEEP 384:SEk2Y08rYQ/8x7nVmEoz5XukK8vR5kLS43FYVH2TMHKXBkyW+VW:SX08rYQ/G7n8AkK8p5kl+HIWC

Runtime Data

Usage (stdout):

Change Install Mode.

CHANGE USER {/EXECUTE | /INSTALL | /QUERY}

  /EXECUTE  Enable execute mode (default).
  /INSTALL  Enable install mode.
  /QUERY    Display current settings.

Usage (stderr):

Invalid parameter(s)
Change Install Mode.

CHANGE USER {/EXECUTE | /INSTALL | /QUERY}

  /EXECUTE  Enable execute mode (default).
  /INSTALL  Enable install mode.
  /QUERY    Display current settings.

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: chgusr.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\chgusr.exe 82

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

chgusr

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Changes the install mode for the Remote Desktop Session Host server.

[!NOTE] This command has been replaced by the change user command. For more information, including the syntax and parameter details, see change user command.

Additional References

MIT License. Copyright (c) 2020-2021 Strontic.