redirusr.exe

File Path: C:\Windows\SysWOW64\redirusr.exe
Description: Microsoft User Container Redirection Utility

Hashes

Type	Hash
MD5	`B99FF0232F503CA3319D21BA0F2AF587`
SHA1	`E5B7973D4A8A46813D0D73833080DB66C97D1729`
SHA256	`A5A5A69D5013DAEB467AC6F98724C28B37A5C1426BD2C6195B92BEEE6ED5D491`
SHA384	`D28BB62F3758DDB4854FE3BAB7E7F2C5BD25681F031C833E7C901F3D1DE61C782528A3F4CA0CA3648943F5C753680BCB`
SHA512	`46D2857751D6BAFA0A05F6E5CEB56CF0B6D956B05F0FD047D1936A7273F8640A251B4DA644381497A283900BE4545940B94501F622F50CB885E4BA7DD3AC3257`
SSDEEP	`192:n/WOcff9gYqYLfuQhYnqarDhwbRM7eF4okCWODBW:nulqYLfjhQqahwbCa4jCWODBW`

Runtime Data

Usage (stdout):

Usage:

redirusr CONTAINER-DN

    where CONTAINER-DN is the distinguished name of the container
    that will become the default location for newly created user objects

    Note: The domain functional level must be at least Windows Server 2003

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\SysWOW64\redirusr.exe

Signature

Status: Signature verified.
Serial: 33000001C422B2F79B793DACB20000000001C4
Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: redirusr.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.17763.1 (WinBuild.160101.0800)
Product Version: 10.0.17763.1
Language: English (United States)

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\redircmp.exe	79