vdsldr.exe
Virtual Disk Service Loader file version info
Program on Windows 7 known copies with hashes
Is it the real vdsldr.exe?
C:\Windows\system32\7 known copies
10.0.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\vdsldr.exe · signed by Microsoft Windows
3269baf596819b77c3ea4a9c5b10d3fd759e53b3a1b3cc83be417dce5cfaecbe10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\vdsldr.exe · signed by Microsoft Windows
bb104769a2845ee2c5cac9cc89cdc0e853ee00dde202f14330954baef4cf5dee10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\vdsldr.exe · signed by Microsoft Windows
c80aa94b7370bcaf14ee105e8208a303957e64f030bff3d77f98ace089a575b710.0.18362.267 (WinBuild.160101.0800) · C:\WINDOWS\system32\vdsldr.exe · signed by Microsoft Windows
e86f443622119bbdc0947257e1e826d47488c86bdf399d3839384e32e0c4770410.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\vdsldr.exe · signed by Microsoft Windows
ddc920acfdb76dd6dfdc0cae7714c1d2995fd6042d1fc2efb1cc1df9478fa26f10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\vdsldr.exe · signed by Microsoft Windows
43f0af018dc498619222cf16e1c9bde2f7710732686dc361e4d692b7efb4ddf96.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\vdsldr.exe · not signed
da5e0acb7ef7d6dcb11507da9c8fe224ef76a57a27caf84afa679fb9e1408ec8From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.