Additional versions

1.0.110.0	3.13%
1.0.75.0	3.13%
1.0.74.0	18.75%
1.0.68.0	3.13%
1.0.58.0	40.63%
1.0.52.0	31.25%

Parent process

Related files

Warning 5 antivirus scanners has detected malware.

Strongvault is an ad-supported online backup program that is typically bundled though various third party software installations. StrongVault by StrongHold which markets the exact same software under a different name called StrongHold.

strongvaultapp.exe is malware that executes as a process with the local user's privileges usually within the context of Windows Explorer. During installation, it (or a shortcut) is added to the user's startup folder which is designed to automatically launch when the user logs into Windows. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Strongvault Online Storage LLC which was issued by the VeriSign certificate authority (CA).

Based on 40+ industry antivirus scanners, 5 of them detected the following malware.

CPU
Total CPU:	0.00037007%	0.028634%
Kernel CPU:	0.00024632%	0.013761%
User CPU:	0.00012375%	0.014873%
Kernel CPU time:	535,052 ms/min	100,923,805ms/min
Memory
Private memory:	41.26 MB	21.59 MB
Private (maximum):	93.12 MB
Private (minimum):	14.47 MB
Non-paged memory:	41.26 MB	21.59 MB
Virtual memory:	325.33 MB	140.96 MB
Virtual memory (peak):	346.41 MB	169.69 MB
Working set:	26.62 MB	18.61 MB
Working set (peak):	93.14 MB	37.95 MB
Page faults:	1,913,201/min	2,039/min
Resource allocations
Threads:	22	12
Handles:	679	600
GUI GDI count:	48	103
GUI GDI peak:	50	142
GUI USER count:	63	49
GUI USER peak:	75	71

StrongVaultApp.exe (main module)
Total CPU:	13.51200142%	0.272967%
Kernel CPU:	6.06854866%	0.107585%
User CPU:	7.44345277%	0.165382%
CPU cycles:	277,120,977/sec	5,741,424/sec
Memory:	408 KB	1.16 MB
ntdll.dll
Total CPU:	0.00399604%
Kernel CPU:	0.00396813%
User CPU:	0.00002791%
CPU cycles:	84,203/sec
Memory:	1.66 MB