Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1.0.0.0	55.56%
1.0.0.0	3.70%
1.0.0.0	3.70%
1.0.0.0	3.70%
1.0.0.0	18.52%
1.0.0.0	11.11%
1.0.0.0	3.70%

(Note, stronghold.com publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

explorer.exe (Windows Explorer by Microsoft Corporation)

PE file structure

Show functions

Import table

mscoree.dll

DllMain

smessenger.exe

Stronghold Messenger by stronghold.com (Signed)

Remove smessenger.exe

Version:	1.0.0.0
MD5:	f540c4caa0950e95e4e81f5080372317
SHA1:	2f59f0b6cebca5027d27f6497c6b8a98279aedd4
SHA256:	6027ab4d71ae29006ef2cd79f810f529b116130a46021981008ee284b3c31315

What is smessenger.exe?

StrongholdMessenger for Strongvault is an ad-supported online backup program that is typically bundled though various third party software installations. StrongVault by StrongHold which markets the exact same software under a different name called StrongHold.

About smessenger.exe (from stronghold.com)

“The integrity of the Stronghold system goes beyond simply keeping data safe. You'll find excellence throughout your experience. Professional attention, ingenious solutions and unlimited resources are ”

Details

File name:	smessenger.exe
Publisher:	Stronghold LLC
Product name:	Stronghold Messenger
Description:	StrongholdMessenger
Typical file path:	C:\Program Files\strongvault online backup\smessenger.exe
Original name:	Messenger.exe
File version:	1.0.0.0
Size:	110.36 KB (113,008 bytes)
Certificate
Issued to:	stronghold.com
Authority (CA):	VeriSign
Effective date:	Sunday, February 19, 2012
Expiration date:	Saturday, February 9, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Programs

The following program will install this file

Strongvault Online Backup

Stronghold.com, LLC

64% remove

Strongvault is the free version of the Stronghold online backup utility. The free version however is typically installed as a bundled product through various modified installers that are known to distribute potentially unwanted applications. While the program itself is not considered adware and provides many useful features, this particular version uses somewhat deceptive methods to install itself on a user's PC (if you do not actively ...

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Messenger' → "C:\Program Files\Strongvault Online Backup\SMessenger.exe"

Network connections

[UDP] listens on port 61855

[UDP] listens on port 58504

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00963787%	0.028634%
Kernel CPU:	0.00769991%	0.013761%
User CPU:	0.00193797%	0.014873%
Kernel CPU time:	2,668 ms/min	100,923,805ms/min
CPU cycles:	262,422/sec	17,470,203/sec
Memory
Private memory:	24.05 MB	21.59 MB
Private (maximum):	18.11 MB
Private (minimum):	5.35 MB
Non-paged memory:	24.05 MB	21.59 MB
Virtual memory:	195.47 MB	140.96 MB
Virtual memory (peak):	209.48 MB	169.69 MB
Working set:	9.23 MB	18.61 MB
Working set (peak):	26.58 MB	37.95 MB
Page faults:	43,670/min	2,039/min
I/O
I/O read transfer:	1.91 KB/sec	1.02 MB/min
I/O read operations:	7/sec	343/min
I/O write transfer:	700 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	251 Bytes/sec	448.09 KB/min
I/O other operations:	16/sec	1,671/min
Resource allocations
Threads:	13	12
Handles:	435	600
GUI GDI count:	40	103
GUI GDI peak:	45	142
GUI USER count:	62	49
GUI USER peak:	68	71

Process properties

Integrety level:	High
Platform:	32-bit
Command lines:	"C:\Program Files\strongvault online backup\smessenger.exe" strongvault 10aaacad-5291-4b70-8a8d-adedf573f8b2 "C:\Program Files\strongvault online backup\smessenger.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads