VmComputeAgent.exe

File Path: C:\Windows\system32\VmComputeAgent.exe
Description: Hyper-V Guest Compute Service

Hashes

Type	Hash
MD5	`2FB92075DF0294D10D1660FC8FD25CA1`
SHA1	`696CBD704B9B0B4C34C7C7B52E3D5EF742C7260A`
SHA256	`ED8805391B9799D1716D0D40C7BF7C45F1AC3181353C46DEC88296613305AE3D`
SHA384	`0C10AAC47AB15A5635A8E621978A84FDDF5C09D6E79BB55ACA385ED584B5573AFEBA31E5CBA8B520F11DFCF59D3E3199`
SHA512	`30B50D46A7EDAC33CE1FA6A48B48F7B79A77B7C8F0476A56F5ADCAF5E0278F118F7915AF251EA109893EF23865D25F05A7E713E36270C09A4AA8BF7613283F83`
SSDEEP	`24576:YE1vnyehMVtchCP/R712azjGmcx+T+vV+b9q59:YEdyehMVtchCP/xYazhcxk+G9q59`
IMP	`78D6614749B85E892B168EA2E2B6D5ED`
PESHA1	`521983F67AEBA28690D102BA6F540C70621096FB`
PE256	`CAC78A92D5A825BDFAEFE30CA2EAE2FC872DC0C8512E0F2625C6905B1765223C`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\cfgmgr32.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\VmComputeAgent.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: VmComputeAgent.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/69
VirusTotal Link: https://www.virustotal.com/gui/file/ed8805391b9799d1716d0d40c7bf7c45f1ac3181353c46dec88296613305ae3d/detection/

MIT License. Copyright (c) 2020-2021 Strontic.