home

vmsp.exe

Virtual Machine Security Process

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Virtual Machine Security Process

 
Part of the Windows Operating System

Version:
10.0.10586.0 (th2_release.151029-1700)

MD5:
9bf0b88e8406cfb09054189aeed9ee72

SHA-1:
224eafcfadf235ec2200656f93951be0627fa77c

SHA-256:
60e1decf90425df33b3f7c5e305b2ce80d0c8cba7d2558796cde301768c1450e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/28/2024 12:28:26 AM UTC  (today)

File size:
107 KB (109,544 bytes)

Product version:
10.0.10586.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
vmsp.exe.mui

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\vmsp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
2/10/2015 9:38:12 PM

Valid to:
5/10/2016 9:38:12 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000007AC8EB9FE6137D67E100000000007A

File PE Metadata
Compilation timestamp:
10/30/2015 5:37:59 AM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.10

CTPH (ssdeep):
3072:FgcRZzsKeVS3cuKeHuauwBTGtCfLlxS5V+:FgcR21VS3cuKWyCfL+z+

Entry address:
0xD560

Entry point:
48, 83, EC, 28, E8, BB, 05, 00, 00, 48, 83, C4, 28, E9, 0E, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 91, AA, 00, 00, 75, 10, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 01, C3, 48, C1, C9, 10, E9, 12, 01, 00, 00, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, F9, 48, 8B, 05, 68, B4, 00, 00, 48, 89, 44, 24, 38, 48, 83, F8, FF, 75, 17, 48, 8B, 1D, 46, 1C, 00, 00, 48, 8B, CB, FF, 15, AD...
 
[+]

Code size:
53 KB (54,272 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.