Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

1.0.0.0	55.56%
1.0.0.0	3.70%
1.0.0.0	3.70%
1.0.0.0	3.70%
1.0.0.0	18.52%
1.0.0.0	11.11%
1.0.0.0	3.70%

(Note, stronghold.com publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

explorer.exe (Windows Explorer by Microsoft Corporation)

PE file structure

Show functions

Import table

mscoree.dll

DllMain

smessenger.exe

Stronghold Messenger by stronghold.com (Signed)

Remove smessenger.exe

Version:	1.0.0.0
MD5:	fbfdd0dbd3a5551dd978f4804d53d596
SHA1:	4c4f8f91a94c9f054ce0a1a1c07e8b0365dbd282
SHA256:	8b8bb0ffa4b94547dfad9362cffac8e5adfe9cb86f7686bd50400ad5db1e684e

What is smessenger.exe?

StrongholdMessenger for Strongvault is an ad-supported online backup program that is typically bundled though various third party software installations. StrongVault by StrongHold which markets the exact same software under a different name called StrongHold.

About smessenger.exe (from stronghold.com)

“The integrity of the Stronghold system goes beyond simply keeping data safe. You'll find excellence throughout your experience. Professional attention, ingenious solutions and unlimited resources are ”

Details

File name:	smessenger.exe
Publisher:	Stronghold LLC
Product name:	Stronghold Messenger
Description:	StrongholdMessenger
Typical file path:	C:\Program Files\strongvault online backup\smessenger.exe
Original name:	Messenger.exe
File version:	1.0.0.0
Size:	204.36 KB (209,264 bytes)
Certificate
Issued to:	stronghold.com
Authority (CA):	VeriSign
Effective date:	Sunday, February 19, 2012
Expiration date:	Saturday, February 9, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Programs

The following program will install this file

Strongvault Online Backup

Stronghold.com, LLC

64% remove

Strongvault is the free version of the Stronghold online backup utility. The free version however is typically installed as a bundled product through various modified installers that are known to distribute potentially unwanted applications. While the program itself is not considered adware and provides many useful features, this particular version uses somewhat deceptive methods to install itself on a user's PC (if you do not actively ...

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Messenger' → "C:\Program Files\Strongvault Online Backup\SMessenger.exe"

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00990325%	0.028634%
Kernel CPU:	0.00563523%	0.013761%
User CPU:	0.00426802%	0.014873%
Kernel CPU time:	411 ms/min	100,923,805ms/min
CPU cycles:	143,355/sec	17,470,203/sec
Context switches:	10/sec	284/sec
Memory
Private memory:	19.05 MB	21.59 MB
Private (maximum):	21.45 MB
Private (minimum):	13.2 MB
Non-paged memory:	19.05 MB	21.59 MB
Virtual memory:	162.29 MB	140.96 MB
Virtual memory (peak):	165.28 MB	169.69 MB
Working set:	15 MB	18.61 MB
Working set (peak):	21.47 MB	37.95 MB
Page faults:	9,781/min	2,039/min
I/O
I/O read transfer:	1.32 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	2 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	132 Bytes/sec	448.09 KB/min
I/O other operations:	7/sec	1,671/min
Resource allocations
Threads:	12	12
Handles:	394	600
GUI GDI count:	26	103
GUI GDI peak:	31	142
GUI USER count:	23	49
GUI USER peak:	17	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\Program Files\strongvault online backup\smessenger.exe"
Owner:	User
Parent process:	Explorer.EXE (Windows Explorer by Microsoft)

Threads