AppVEntSubsystems64.dll
- File Path:
C:\Windows\system32\AppVEntSubsystems64.dll
- Description: Client Virtualization Subsystems
Hashes
Type |
Hash |
MD5 |
685269D6EC6A1E669690E760B45685EE |
SHA1 |
7A9A6B38B7EC1F6176013A79B51EEF51A839FC2D |
SHA256 |
5A734107D29C28EAEB05DFC446719B54862723A3E1F2AE132F3853B99111354C |
SHA384 |
10514D1879930B5B8CA7A7F45F0C1865FB3942EE9D70F9A3C4D1398AEE58097609D595915DA3DA3DF8ED226B9A85266B |
SHA512 |
63D88D7ABDC05FAD680A0A3B9162D2CB71928D898A05A48ABE70CEB509B55B7A50547D5039F3D393C7A3FB5FF4368F25ED9F8ABD5A876F6B957027A600C41998 |
SSDEEP |
49152:/DBgQSERYicXetsmxmaO9roHaHMQlfi/H:o99Il |
IMP |
034024CB09DA1D65A6EDA08227840DAE |
PESHA1 |
DD73939A719BDDE5554079DB890BD49609B0949D |
PE256 |
497363AB8B95514693A338D2BCCC718DCCCDABA569AA944DB3BE2A99CB3010E0 |
DLL Exports:
Function Name |
Ordinal |
Type |
RequestUnhookedFunctionList |
2 |
Exported Function |
VirtualizeCurrentProcess |
5 |
Exported Function |
VirtualizeCurrentThread |
3 |
Exported Function |
APIExportForDetours |
1 |
Exported Function |
CurrentThreadIsVirtualized |
4 |
Exported Function |
IsProcessHooked |
6 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: AppVEntSubsystems.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.488 (WinBuild.160101.0800)
- Product Version: 10.0.19041.488
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/5a734107d29c28eaeb05dfc446719b54862723a3e1f2ae132f3853b99111354c/detection/
MIT License. Copyright (c) 2020-2021 Strontic.