vmdemux.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\vmdemux.exe
  • Description: Hyper-V Unified Debugging Session Demuxer

Hashes

Type Hash
MD5 E403383D7F38F00E18C76CFAC226069B
SHA1 DC37A92A8A14FD0C6BF7BBBC64BFF66BB58AD2CA
SHA256 76340B2A29DC794CD254A0CBAA28F62890E51D187E64E09D072BC243B9E1D510
SHA384 302EBF69A55B882EF6C6094A8E9762D75DAE27DC99DBEE996208E5A46AD8EF762902D0BD03DFA449BF261AC62BC75159
SHA512 DAA8A86F4F375274680762BC3FB2058C3655BA51F69828D2D11F00516B14E3019F3F964D897E26E36223FF8A3B82AB4E64CF21149F1F730C3E7684C37584CBCE
SSDEEP 1536:xsTe9974t5uZbYU+DkkiqhxwSZ+iWHBB8avvQZpEZHHTg:xsTe99Q5uZb1+Dkdq40+dDZHU
IMP BF67041AAF4608B178DB55990DAA8297
PESHA1 97B4380A5910415E97EAEF46D11D9AD1CD835FBA
PE256 EB20588DE054CFCE8F634A4357B510F2D1BC8A6F628E7685D8C6F54C022BAD65

Runtime Data

Usage (stderr):

bad command line option '--help'.  For usage try 'vmdemux -?'

Child Processes:

Fondue.exe

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\vmdemux.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: vmdemux.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/76340b2a29dc794cd254a0cbaa28f62890e51d187e64e09d072bc243b9e1d510/detection

MIT License. Copyright (c) 2020-2021 Strontic.