AppVEntSubsystems64.dll

  • File Path: C:\Windows\system32\AppVEntSubsystems64.dll
  • Description: Client Virtualization Subsystems

Hashes

Type Hash
MD5 685269D6EC6A1E669690E760B45685EE
SHA1 7A9A6B38B7EC1F6176013A79B51EEF51A839FC2D
SHA256 5A734107D29C28EAEB05DFC446719B54862723A3E1F2AE132F3853B99111354C
SHA384 10514D1879930B5B8CA7A7F45F0C1865FB3942EE9D70F9A3C4D1398AEE58097609D595915DA3DA3DF8ED226B9A85266B
SHA512 63D88D7ABDC05FAD680A0A3B9162D2CB71928D898A05A48ABE70CEB509B55B7A50547D5039F3D393C7A3FB5FF4368F25ED9F8ABD5A876F6B957027A600C41998
SSDEEP 49152:/DBgQSERYicXetsmxmaO9roHaHMQlfi/H:o99Il
IMP 034024CB09DA1D65A6EDA08227840DAE
PESHA1 DD73939A719BDDE5554079DB890BD49609B0949D
PE256 497363AB8B95514693A338D2BCCC718DCCCDABA569AA944DB3BE2A99CB3010E0

DLL Exports:

Function Name Ordinal Type
RequestUnhookedFunctionList 2 Exported Function
VirtualizeCurrentProcess 5 Exported Function
VirtualizeCurrentThread 3 Exported Function
APIExportForDetours 1 Exported Function
CurrentThreadIsVirtualized 4 Exported Function
IsProcessHooked 6 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AppVEntSubsystems.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/5a734107d29c28eaeb05dfc446719b54862723a3e1f2ae132f3853b99111354c/detection/

MIT License. Copyright (c) 2020 Strontic.