home

QwestPersonalDigitalVault.exe

Qwest Personal Digital Vault

SwapDrive Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Qwest Personal Digital Vault’.
Publisher:
SwapDrive Inc.  (signed and verified)

Product:
Qwest Personal Digital Vault

Version:
1.1.0.11397

MD5:
0617e4f1425f1adcc15ab30cb99dae0d

SHA-1:
78f60ba51ab8afc9edb73b0deca64424b4930a48

SHA-256:
f51a5614cb4547b91402849f42255af3a9aa637fb4a7777e547391ac247e4b88

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 12:22:06 AM UTC  (today)

File size:
1 MB (1,064,464 bytes)

Product version:
1.1.0.11397

Copyright:
Copyright © 2008

Original file name:
QwestPersonalDigitalVault.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\qwest personal digital vault\qwestpersonaldigitalvault.exe

Digital Signature
Signed by:
SwapDrive Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/1/2008 8:11:15 AM

Valid to:
10/11/2009 2:30:27 PM

Subject:
CN=SwapDrive Inc., OU=Security Department, O=SwapDrive Inc., L=Washington, S=District of Columbia, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
780640B8A28184C21058140E96960139

File PE Metadata
Compilation timestamp:
9/15/2009 12:25:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:+QRJ0TFF5BNA9tX2FOB6X2FOBMNNV9tX2FOB:+qJgrArXiX0VrX

Entry address:
0xCB25E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6415

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
805 KB (824,320 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Qwest Personal Digital Vault

Command:
"C:\Program Files\qwest personal digital vault\qwestpersonaldigitalvault.exe" \m


Scan QwestPersonalDigitalVault.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.