subst.exe

File Path: C:\Windows\SysWOW64\subst.exe
Description: Subst Utility

Hashes

Type	Hash
MD5	`074106AE38474F73BB1B11F53309203D`
SHA1	`558786B4E646B138E3A75FEB456A494A2588CE38`
SHA256	`2AEF2B8B7896FD5A0F2DA5781521B60D2FBF1AB361B0CE64AE8EEEB6C8E21AEB`
SHA384	`6D57DC0145FB474ABA3F17437E96C702EF318360186E7A318E7F9B193741D998E090B76403CC6CD5EF212ECE1E928271`
SHA512	`99AAE69EC4359AA56F68E228E545B9E07E85689ED904068B0AAA964E9F489ECE5A6B94AB7AECB1011BABCCD2B36F0113765470DE8A7AACE96EBFD7D20136393E`
SSDEEP	`192:ZqScdC+ZvdPAe5B2WVYtkGplhEdgwtjkdzQkJWzGWneD:cSc8+Zv1AyIUZGplhmg0jAJWzGWn`
IMP	`7DD76573763F447C2EF4E1C30B281996`
PESHA1	`B9846A082ABB29C83D238BDDAA7EC642B7EB676D`
PE256	`8C0FD98BE2F4978AAA9DD542CD0DDB4A6D25AC274796302C906DE8C89410DD84`

Runtime Data

Usage (stdout):

Associates a path with a drive letter.

SUBST [drive1: [drive2:]path]
SUBST drive1: /D

  drive1:        Specifies a virtual drive to which you want to assign a path.
  [drive2:]path  Specifies a physical drive and path you want to assign to
                 a virtual drive.
  /D             Deletes a substituted (virtual) drive.

Type SUBST with no parameters to display a list of current virtual drives.

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\subst.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: Subst.Exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/76
VirusTotal Link: https://www.virustotal.com/gui/file/2aef2b8b7896fd5a0f2da5781521b60d2fbf1ab361b0ce64ae8eeeb6c8e21aeb/detection

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

subst

Associates a path with a drive letter. If used without parameters, subst displays the names of the virtual drives in effect.

Syntax

subst [<drive1>: [<drive2>:]<path>]
subst <drive1>: /d

Parameters

Parameter	Description
`<drive1>:`	Specifies the virtual drive to which you want to assign a path.
`[<drive2>:]<path>`	Specifies the physical drive and path that you want to assign to a virtual drive.
/d	Deletes a substituted (virtual) drive.
/?	Displays help at the command prompt.

Remarks

The following commands don’t work and must not be used on drives specified in the subst command:
- chkdsk command
  
  diskcomp command
  
  diskcopy command
  
  format command
  
  label command
  
  recover command
The <drive1> parameter must be within the range that is specified by the lastdrive command. If not, subst displays the following error message: Invalid parameter - drive1:

Examples

To create a virtual drive z for the path b:\user\betty\forms, type:

subst z: b:\user\betty\forms

Instead of typing the full path, you can reach this directory by typing the letter of the virtual drive followed by a colon as follows:

z:

Additional References

Command-Line Syntax Key