redirusr.exe

  • File Path: C:\Windows\system32\redirusr.exe
  • Description: Microsoft User Container Redirection Utility

Hashes

Type Hash
MD5 E28F7E68EFFB2161CC3902BC61F30C39
SHA1 8408F1C115DAE6466F47FC37C75F9A129CC66800
SHA256 8C3A39BB2E20FD149EF7CCCEC9B0371CDA343E0910CFED7F8A9438753CA7A783
SHA384 47F3624F7493C8C7D774E0C2AEC5FA37875228E1B2072F78B1E7D8C15E44CEF13D7B4EF79F09EBDE14FA14683E2F3163
SHA512 895BA7164FCE6283D68DA8C485BCC9BC4AE6F57907567D8F8C9F65B28E88E8664925F9160E5C631145707402028EA2B2BFD5A42923FFD7D04E6F2FD6BB9742D0
SSDEEP 192:WnRVANyjXrVD60A7kTCRQg1fe6G2+yTEtGoFdF4c0bSmSWODBW:Wn8erVDP4nGgtedNVt3F4cifSWODBW

Runtime Data

Usage (stdout):

Usage:

redirusr CONTAINER-DN

    where CONTAINER-DN is the distinguished name of the container
    that will become the default location for newly created user objects

    Note: The domain functional level must be at least Windows Server 2003


Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\redirusr.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: redirusr.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\redircmp.exe 86

MIT License. Copyright (c) 2020-2021 Strontic.