immersivetpmvscmgrsvr.exe
- File Path:
C:\Windows\system32\immersivetpmvscmgrsvr.exe
- Description: Immersive TPM Virtual Smart Card Manager COM Server
Hashes
Type |
Hash |
MD5 |
00B40459B9C6C25A7A56D4BA6F26ABC7 |
SHA1 |
2046769DB5B2B9CC89D47F1C6C3E578A09837D23 |
SHA256 |
B73B34B529D5C3EFB989C89D05055F365A4526E0D6B4E55C4AC7B9C56435CF58 |
SHA384 |
0F24E1244C93C2097AF6893AD946A002F45FC168643856F9111BD3F1154F3FA9D740B33FAB1D9A8AE5E2808FF430FE8E |
SHA512 |
C0496B001E8AE1F10F9F75FABCD6FD13D9CBB72DA7A0ACEBF004F66FC6A99D231EED91DE53C7609EA4FBF268DF82A1DAB7DF79DD419E58C805651CFDFA72FCAC |
SSDEEP |
3072:osf9DkKVni8gWJ3wOE491Pa62HO+FwqZqcmm1:osFDkQWCj5s5O3dxm |
IMP |
EF430A49CAEE55F9924945FCB05ACA33 |
PESHA1 |
83D783E654A6333C5AAC20F32EBEB303188EB405 |
PE256 |
C5870E5E25CA36D16BD96BCEE08AD4377A5962054A34A3ADFA7299714FF5D962 |
Runtime Data
Open Handles:
Path |
Type |
(R-D) C:\Windows\System32\en-US\immersivetpmvscmgrsvr.exe.mui |
File |
(RW-) C:\Users\user |
File |
\BaseNamedObjects__ComCatalogCache__ |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 |
Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
Loaded Modules:
Path |
C:\Windows\System32\ADVAPI32.dll |
C:\Windows\System32\combase.dll |
C:\Windows\System32\GDI32.dll |
C:\Windows\System32\gdi32full.dll |
C:\Windows\system32\immersivetpmvscmgrsvr.exe |
C:\Windows\System32\KERNEL32.DLL |
C:\Windows\System32\KERNELBASE.dll |
C:\Windows\System32\msvcp_win.dll |
C:\Windows\System32\msvcrt.dll |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\OLEAUT32.dll |
C:\Windows\System32\RPCRT4.dll |
C:\Windows\System32\sechost.dll |
C:\Windows\System32\ucrtbase.dll |
C:\Windows\System32\USER32.dll |
C:\Windows\System32\win32u.dll |
Signature
- Status: Signature verified.
- Serial:
33000002EC6579AD1E670890130000000002EC
- Thumbprint:
F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: ImmersiveTpmVscMgrSvr.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/74
- VirusTotal Link: https://www.virustotal.com/gui/file/b73b34b529d5c3efb989c89d05055f365a4526e0d6b4e55c4ac7b9c56435cf58/detection
MIT License. Copyright (c) 2020-2021 Strontic.