home

vshadow.exe

Vault Services

Publisher:
Vault Services  (signed and verified)

MD5:
014f8e4b71ce6b4975c262b5d5237b00

SHA-1:
a76078e1d29ce00f09412bb9bba2c84a46bc1163

SHA-256:
9ae33a0490af22613fdeffcfa6d12d05c1ca6019ca658adcb7ccbb209bbcbced

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/16/2024 3:17:45 AM UTC  (today)

File size:
1.2 MB (1,289,304 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\myvault\vshadow.exe

Digital Signature
Signed by:
Vault Services

Authority:
GoDaddy.com, Inc.

Valid from:
1/4/2016 4:12:38 PM

Valid to:
1/4/2017 4:12:38 PM

Subject:
CN=Vault Services, O=Vault Services, L=Santa Monica, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00CB8F4BA61FFD3EC6

File PE Metadata
Compilation timestamp:
11/19/2007 2:19:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:zzSQqUtqSnIrKFhyNjtWvQK5xlJ9rJXVoVxW3:zzSQqUwJrKSNjtWf9rJXVwO

Entry address:
0x7B747

Entry point:
E9, 64, CA, 08, 00, E9, BF, AC, 01, 00, E9, CA, 21, 07, 00, E9, 35, 35, 03, 00, E9, 40, 59, 0D, 00, E9, FB, 27, 06, 00, E9, D6, D0, 09, 00, E9, F1, 76, 0E, 00, E9, 6C, B7, 0B, 00, E9, 13, 97, 0E, 00, E9, B2, 84, 02, 00, E9, 4D, 4A, 01, 00, E9, A4, 96, 0E, 00, E9, E3, 4C, 0D, 00, E9, CE, CD, 08, 00, E9, 59, D5, 03, 00, E9, A4, 76, 07, 00, E9, 3F, 8E, 02, 00, E9, BA, D6, 01, 00, E9, E5, 76, 01, 00, E9, 30, E3, 02, 00, E9, 7B, 20, 0D, 00, E9, 1E, 96, 0E, 00, E9, 01, 0D, 09, 00, E9, FC, C9, 0A, 00, E9, A7, BF...
 
[+]

Entropy:
5.5079

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
1000 KB (1,024,000 bytes)

Scan vshadow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.