vds.exe
Virtual Disk Service file version info
Program on Windows 7 known copies with hashes
Is it the real vds.exe?
C:\Windows\system32\7 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\vds.exe · signed by Microsoft Windows
25587d0e13f0b3dbbf7b72a239a9b104f4eee0e90be42c6973750cdd58aa7cff10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\vds.exe · signed by Microsoft Windows
8a0aa93f17fee2c816d57adb6b6be38d195d87a3cdcfbddb78e0af0d5452bc5e10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\vds.exe · signed by Microsoft Windows
d10944c16053504739af3f1f2620fa652b2191622e826199aa69f19467aa494d10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\vds.exe · signed by Microsoft Windows
dfb0f5c163b45f769be1f0dbf51254b67bfe191e37b049628a659381b445983a10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\vds.exe · signed by Microsoft Windows
9cecfc7977baa23a840f987a28813227bab3f2dfdf1d571b51327107b5aa8ce210.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\vds.exe · signed by Microsoft Windows
de976b547872b0919e16d5a97902b95893ad5b76de6a11be5f874eadbca49f936.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\vds.exe · not signed
63c07312adb6f8a8bde93361c30ac63dab4de1141af54630eef11e54b0bf983dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.