subst.exe

File Path: C:\WINDOWS\system32\subst.exe
Description: Subst Utility

Hashes

Type	Hash
MD5	`1AD53A6F2B9C205A3EA47ABCFF0EC26F`
SHA1	`A656DCE658443A8649A53411B772E435A80B8288`
SHA256	`7D3D8F263C384F38236C83E3E0302A04E6CD79658801E972A7B7EDCAD5D0ABED`
SHA384	`2A1FD1C820792EA534B5020586F0D783AD0B9422FEC44508391E75BD77AD6AECDD03AEF622C940E12F1A9A5A4BE5814C`
SHA512	`995643CA5811E6F5B1CE19A928294829E7B19116E3526910C0BACF3D7841C2C1F8C2B89CF731CC66CC66DA1F3598F4453693146C12E0C086EDF1DB1A714401C7`
SSDEEP	`192:Zp7vyMJa+1dMyPXCfzEbaXaLOy4H6jTiHl++KaJN4PGmyXteVprkmJW8GW:ZkAa+1dJPyfxuO/S+opPGmyX8LJW8GW`
IMP	`657724BEF967C549A066ECF72A628438`
PESHA1	`903676AB03CFFCCC666D6F61E8E0603432870A6A`
PE256	`DAE4AAD63F0FE9882541A6E4BACFAF2F8879AE99BE4530E47AB03CC26124263C`

Runtime Data

Usage (stdout):

Associates a path with a drive letter.

SUBST [drive1: [drive2:]path]
SUBST drive1: /D

  drive1:        Specifies a virtual drive to which you want to assign a path.
  [drive2:]path  Specifies a physical drive and path you want to assign to
                 a virtual drive.
  /D             Deletes a substituted (virtual) drive.

Type SUBST with no parameters to display a list of current virtual drives.

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\subst.exe

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: Subst.Exe.MUI
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/7d3d8f263c384f38236c83e3e0302a04e6cd79658801e972a7b7edcad5d0abed/detection

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

subst

Associates a path with a drive letter. If used without parameters, subst displays the names of the virtual drives in effect.

Syntax

subst [<drive1>: [<drive2>:]<path>]
subst <drive1>: /d

Parameters

Parameter	Description
`<drive1>:`	Specifies the virtual drive to which you want to assign a path.
`[<drive2>:]<path>`	Specifies the physical drive and path that you want to assign to a virtual drive.
/d	Deletes a substituted (virtual) drive.
/?	Displays help at the command prompt.

Remarks

The following commands don’t work and must not be used on drives specified in the subst command:
- chkdsk command
  
  diskcomp command
  
  diskcopy command
  
  format command
  
  label command
  
  recover command
The <drive1> parameter must be within the range that is specified by the lastdrive command. If not, subst displays the following error message: Invalid parameter - drive1:

Examples

To create a virtual drive z for the path b:\user\betty\forms, type:

subst z: b:\user\betty\forms

Instead of typing the full path, you can reach this directory by typing the letter of the virtual drive followed by a colon as follows:

z:

Additional References

Command-Line Syntax Key