Should I block it?

No, this file is 100% safe to run.

Additional versions

13.6.20.2072	5.56%
13.6.20.2072	1.11%
13.6.20.2072	2.22%
13.6.20.2072	1.11%
13.6.20.2072	1.11%
13.6.20.2072	1.11%
13.6.20.2072	1.11%
13.6.20.2072	1.11%
13.6.0.1550	2.22%
13.6.0.1550	1.11%
13.6.0.1550	1.11%
13.6.0.1550	1.11%
13.6.0.1550	1.11%
13.6.0.1550	1.11%
13.6.0.798	2.22%
13.6.0.798	3.33%
13.6.0.798	1.11%
13.6.0.716	2.22%
13.6.0.716	2.22%
13.6.0.584	11.11%
13.6.0.584	3.33%
13.6.0.584	1.11%
13.6.0.584	1.11%
13.6.0.584	1.11%
13.6.0.584	1.11%
View more
13.6.0.584	1.11%
13.4.0.312	3.33%
13.4.0.312	6.67%
13.4.0.312	4.44%
13.4.0.163	3.33%
12.3.0.8	17.78%
12.3.0.8	2.22%
12.3.0.8	1.11%
12.3.0.8	5.56%
12.3.0.8	1.11%
12.1.0.10	1.11%

Relationships

Parent process

avguard.exe (Avira Free Antivirus by Avira Operations GmbH & Co. KG)

Related files

PE file structure

Show functions

Import table

advapi32.dll

LookupPrivilegeValueW, AdjustTokenPrivileges, OpenProcessToken

kernel32.dll

GetCurrentThreadId, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, HeapSetInformation, Sleep, InterlockedExchange, DecodePointer, EncodePointer, GetTickCount, LoadLibraryA, DeviceIoControl, GetModuleFileNameW, InterlockedIncrement, LocalFree, FormatMessageW, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, SetLastError, GetProcAddress, InterlockedExchangeAdd, InterlockedDecrement, LoadLibraryW, FreeLibrary, InterlockedCompareExchange, SetConsoleCtrlHandler, WaitForSingleObject, CreateEventW, WaitForMultipleObjects, ReadFile, GetOverlappedResult, OpenProcess, GetLastError, CreateFileW, GetCurrentProcess, DuplicateHandle, SetEvent, GetCurrentProcessId, GetVersionExW, CloseHandle, GetSystemTimeAsFileTime, GetModuleHandleW, Process32FirstW, Module32FirstW, Process32NextW, CreateToolhelp32Snapshot, Module32NextW, GetStartupInfoW

msvcp100.dll

DllMain

msvcr100.dll

DllMain

ole32.dll

CoInitializeSecurity, CoInitialize, CoUninitialize

avshadow.exe

Avira Free Antivirus by Avira Operations GmbH & Co. KG (Signed)

Remove avshadow.exe

Version:	13.6.0.798
MD5:	d766504f9bb339feb5611fdd5a66c987
SHA1:	f872b8a93a54a06230c4b65d211f3fc547e47aff
SHA256:	9ef3361d1c41c6f2b88913be4850cd578e88dda9b4a0048a78dddb70232ba3e2

What is avshadow.exe?

Avira Shadow Copy Service. This edition of Avira Antivirus is free of charge and runs as a background process which checks every file opened or downloaded. Like many antivirus programs, it can run a full or custom scan to check the PC for malware in order to remove them. It updates its virus definitions automatically everyday by default using the Internet.

About avshadow.exe (from Avira Operations GmbH & Co. KG)

“Our entry-level antivirus eliminates many forms of malware, including worms, rootkits and costly dialers. System Scanner prevents infection from viruses, worms and Trojans. AHeAD Technology halts unkn”

Overview

avshadow.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent avguard.exe (Avira Free Antivirus by Avira Operations GmbH & Co. KG). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Avira Operations GmbH & Co. KG which was issued by the VeriSign certificate authority (CA).

Details

File name:	avshadow.exe
Publisher:	Avira Operations GmbH & Co. KG
Product name:	Avira Free Antivirus
Description:	Avira Shadow Copy Service
Typical file path:	C:\Program Files\avira\antivir desktop\avshadow.exe
File version:	13.6.0.798
Size:	77.72 KB (79,584 bytes)
Certificate
Issued to:	Avira Operations GmbH & Co. KG
Authority (CA):	VeriSign
Expiration date:	Sunday, July 20, 2014
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00150853%	0.028634%
Kernel CPU:	0.00124278%	0.013761%
User CPU:	0.00026576%	0.014873%
Kernel CPU time:	36 ms/min	100,923,805ms/min
CPU cycles:	1,388/sec	17,470,203/sec
Memory
Private memory:	822.67 KB	21.59 MB
Private (maximum):	2.93 MB
Private (minimum):	1.66 MB
Non-paged memory:	822.67 KB	21.59 MB
Virtual memory:	21.4 MB	140.96 MB
Virtual memory (peak):	23.4 MB	169.69 MB
Working set:	1.68 MB	18.61 MB
Working set (peak):	2.95 MB	37.95 MB
Page faults:	805/min	2,039/min
I/O
I/O read transfer:	6.13 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	6 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	3.23 KB/sec	448.09 KB/min
I/O other operations:	6/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	49	600
GUI GDI count:	8	103
GUI USER count:	1	49

Process properties

Integrety level:	System
Platform:	32-bit
Command lines:	"C:\Program Files\avira\antivir desktop\avshadow.exe" avshadowcontrol0_00000764 "C:\Program Files\avira\antivir desktop\avshadow.exe" avshadowcontrol0_0000069c "C:\Program Files\avira\antivir desktop\avshadow.exe" avshadowcontrol0_00000750
Owner:	SYSTEM
Parent process:	avguard.exe (Avira Free Antivirus by Avira Operations GmbH & Co. KG)

Threads