Vmw.exe
- File Path:
C:\Windows\system32\Vmw.exe - Description:
Hashes
| Type | Hash |
|---|---|
| MD5 | 5A059822926580DA1453FB03DA6BE3C2 |
| SHA1 | A6F5715DC02AAB81C2A7B49A03522CA43C4A811E |
| SHA256 | D78C3DE824DA3B982C71CB6F8ED1DC8B7896BDE7369CC911977E6F174FB1F732 |
| SHA384 | 96E751041FD1778967BA387AF81B1EA280822F334776268C9D3A203E3521B317D6EE7B67853D5D20714CA410D8C643E5 |
| SHA512 | B7EF2BD26DC43666DDBF44D8FB5E304436140C431D63504AF7B814447B3043A46534630DBBFF4FBEEE047014CAB0E280ECFF9F2E7EAA96E4E53B17DB1AF89E73 |
| SSDEEP | 12288:x73GXyof0k4Bd7mPnL6NIHm9Lwv7mPnL6NIHm9L:h2Xy8aba |
Runtime Data
Window Title:
Volume Activation Tools
Open Handles:
| Path | Type |
|---|---|
| (R-D) C:\Windows\Fonts\StaticCache.dat | File |
| (RW-) C:\Users\user\Documents | File |
| ...\Cor_SxSPublic_IPCBlock | Section |
| \BaseNamedObjects\Cor_Private_IPCBlock_v4_6804 | Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
| \Sessions\2\Windows\Theme4283305886 | Section |
| \Windows\Theme1956823608 | Section |
Loaded Modules:
| Path |
|---|
| C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\d9010e50e40e3e6a8e77495acf060c0f\mscorlib.ni.dll |
| C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll |
| C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll |
| C:\Windows\System32\ADVAPI32.dll |
| C:\Windows\System32\bcryptPrimitives.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\GDI32.dll |
| C:\Windows\System32\gdi32full.dll |
| C:\Windows\System32\IMM32.DLL |
| C:\Windows\System32\kernel.appcore.dll |
| C:\Windows\System32\KERNEL32.dll |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\SYSTEM32\MSCOREE.DLL |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\SYSTEM32\MSVCR120_CLR0400.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\ole32.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\SHLWAPI.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\System32\USER32.dll |
| C:\Windows\system32\VERSION.dll |
| C:\Windows\system32\Vmw.exe |
| C:\Windows\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
33000001C422B2F79B793DACB20000000001C4 - Thumbprint:
AE9C1AE54763822EEC42474983D8B635116C8452 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: Vmw.exe
- Product Name: Microsoft (R) Windows (R) Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1
- Product Version: 10.0.17763.1
- Language: Language Neutral
- Legal Copyright: Copyright (c) Microsoft Corporation. All rights reserved.
MIT License. Copyright (c) 2020-2021 Strontic.