hvsievaluator.exe

  • File Path: C:\Windows\system32\hvsievaluator.exe
  • Description: Microsoft Defender Application Guard Policy Evaluator

Hashes

Type Hash
MD5 A26ECA1B3E8AABE2F1D44641333D35EA
SHA1 6A60E2ECC1730E5AF0563B6373E2E05D4AC9B657
SHA256 BFFDA0FC8DA8F4307847FADB38770885E6A2E25B6DDDEC5474D68D8DEBDAE823
SHA384 DAA964B099574B89DC8F5304ECE8C74296738C124BF298F11F91599217F9FE65730F8DC2140E3F58F4EEA3A3BB3715B8
SHA512 25C96923E36510931F47FDBCE47862A7EF73756B1EBF87AC8276E01C8B37D73BC1A3A7FDB43C3D4CEAA8D7EBFBBD00F13E3B4859CEF4A312ECE67B0EC4443C31
SSDEEP 3072:oC7MPsDfE62taO/3USL4qCt2fUN9una4UvkNBOiOlk4FHj:j4wCdfUSLZCt2fUKlAUOlkK
IMP A04C5AF08B405A6490A1C28DFA7E95B1
PESHA1 B54EF9B2DF603612A59D110FE735A228233C7943
PE256 0EADF858A064DEB9B48F1A7C5E0BCC3BBD6CB710BF204ADCB81011C0F8287AC4

Runtime Data

Loaded Modules:

Path
C:\Windows\system32\hvsievaluator.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: HvsiEvaluator.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/bffda0fc8da8f4307847fadb38770885e6a2e25b6dddec5474d68d8debdae823/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\hvsievaluator.exe 90

MIT License. Copyright (c) 2020-2021 Strontic.