VmComputeAgent.exe

  • File Path: C:\Windows\system32\VmComputeAgent.exe
  • Description: Hyper-V Guest Compute Service

Hashes

Type Hash
MD5 EE281A0EB83B683F5036C9BAC9B77FD0
SHA1 AB1450B97CCB5CCCF7FC71103ABB3C1D79F8DA59
SHA256 5364888BA95D4013DA30EF97EBD2DF279D31120224D22C89EE03BC80661EFD87
SHA384 478E469283DB6987E211F7B0B5E982C58C98ED91FAB243EDE693FC781272711BCF90B553B6CD6C0C985C471FDCD1EE9F
SHA512 661ECC157E8618851DB7E866C8216C760260300D5979CEF25F1C56AA41566A81E50220BA57B73D1752747799AE65621C61C1D07A9AEC4D32F8F46B28E3E35990
SSDEEP 24576:ISrGE5WhdOd278TQukVDumXmErIORhW+e/bMqK:ISrG2WhdOd278TQukImXhTe+OMqK

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\cfgmgr32.dll
C:\Windows\system32\container.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\VmComputeAgent.exe
C:\Windows\System32\WS2_32.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: VmComputeAgent.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.