redirusr.exe

File Path: C:\Windows\system32\redirusr.exe
Description: Microsoft User Container Redirection Utility

Hashes

Type	Hash
MD5	`E28F7E68EFFB2161CC3902BC61F30C39`
SHA1	`8408F1C115DAE6466F47FC37C75F9A129CC66800`
SHA256	`8C3A39BB2E20FD149EF7CCCEC9B0371CDA343E0910CFED7F8A9438753CA7A783`
SHA384	`47F3624F7493C8C7D774E0C2AEC5FA37875228E1B2072F78B1E7D8C15E44CEF13D7B4EF79F09EBDE14FA14683E2F3163`
SHA512	`895BA7164FCE6283D68DA8C485BCC9BC4AE6F57907567D8F8C9F65B28E88E8664925F9160E5C631145707402028EA2B2BFD5A42923FFD7D04E6F2FD6BB9742D0`
SSDEEP	`192:WnRVANyjXrVD60A7kTCRQg1fe6G2+yTEtGoFdF4c0bSmSWODBW:Wn8erVDP4nGgtedNVt3F4cifSWODBW`

Runtime Data

Usage (stdout):

Usage:

redirusr CONTAINER-DN

    where CONTAINER-DN is the distinguished name of the container
    that will become the default location for newly created user objects

    Note: The domain functional level must be at least Windows Server 2003

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\redirusr.exe

Signature

Status: Signature verified.
Serial: 33000001C422B2F79B793DACB20000000001C4
Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: redirusr.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.17763.1 (WinBuild.160101.0800)
Product Version: 10.0.17763.1
Language: English (United States)

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\redircmp.exe	86