Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.6.3.24650 19.20%
4.6.3.24650 1.25%
4.6.2.22610 61.35%
4.6.2.22610 13.47%
4.6.1.10263 0.25%
4.6.0.1523 4.49%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, RegQueryInfoKeyW, AddAce, InitializeAcl, GetAclInformation, GetSecurityDescriptorControl, MakeAbsoluteSD, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, InitializeSecurityDescriptor, OpenProcessToken, OpenThreadToken, SetServiceStatus, DeregisterEventSource, ReportEventW, RegisterEventSourceW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, RegEnumKeyExW, GetLengthSid, IsValidSid, CopySid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, CreateServiceW, DeleteService, ControlService, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetTokenInformation, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, RegOpenKeyExA, LookupAccountSidW, LookupPrivilegeNameW, AdjustTokenPrivileges, LookupPrivilegeValueW, LogonUserW, CreateProcessAsUserW, DuplicateToken, EqualSid, CheckTokenMembership, RegOpenKeyW, MakeSelfRelativeSD, GetSecurityDescriptorLength, ConvertSidToStringSidW, RegQueryValueExA
comctl32.dll
GetMUILanguage
faultrep.dll
ReportFault
kernel32.dll
GetCurrentProcessId, InterlockedExchange, IsWow64Process, GetNativeSystemInfo, OpenProcess, HeapSetInformation, GetProcessHeap, GetCommandLineW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, InterlockedDecrement, LocalFree, Sleep, ReleaseMutex, GetVersionExW, CompareFileTime, DeleteFileW, FindFirstFileW, FindNextFileW, FindClose, CreateFileW, GetTempPathW, CreateFileMappingW, MapViewOfFile, UnmapViewOfFile, CreateMutexW, GetUserDefaultLCID, GetLocalTime, InterlockedIncrement, WaitForSingleObject, GetExitCodeProcess, CreateProcessW, GetModuleFileNameW, GetCurrentThread, GetCurrentProcess, GetCurrentThreadId, lstrcmpiW, GetModuleHandleW, GetProcAddress, CloseHandle, LoadLibraryExW, CreateThread, CreateEventW, SetEvent, LoadLibraryW, CreateRemoteThread, WriteProcessMemory, DuplicateHandle, VirtualFreeEx, VirtualAllocEx, OutputDebugStringW, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedCompareExchange, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetLastError, RaiseException, lstrlenW
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoInitializeSecurity, StringFromGUID2, CoTaskMemFree, CoTaskMemRealloc, CoUninitialize, CoInitializeEx, CoTaskMemAlloc, CoCreateInstance
rpcrt4.dll
RpcStringBindingComposeW, RpcStringFreeW, RpcBindingFromStringBindingW, RpcBindingFree, RpcMgmtStopServerListening, RpcMgmtWaitServerListen, RpcServerUnregisterIf, RpcServerRegisterIf2, RpcBindingSetAuthInfoExW, RpcServerRegisterAuthInfoW, RpcImpersonateClient, RpcRevertToSelf, RpcServerUseProtseqEpW, RpcBindingInqAuthClientW, NdrClientCall2, NdrServerCall2, RpcServerListen
shell32.dll
SHGetSpecialFolderPathW
user32.dll
WaitForInputIdle, LoadStringW, CharNextW, CharUpperW, MessageBoxW, DispatchMessageW, TranslateMessage, GetMessageW, PostThreadMessageW
userenv.dll
UnloadUserProfile

sftvsa.exe

Microsoft Application Virtualization by Microsoft Corporation (Signed)

Remove sftvsa.exe
Version:   4.6.3.24650
MD5:   39b1d0a636a400304565d4521fad6d77
SHA1:   4a9c2b7236a08483d846df2ec8f4a978b7af787c
SHA256:   1f01db35b5a477aa7a77585c9304e6b5f3e67807531305bca93a7f494ced8f59

What is sftvsa.exe?

Microsoft Application Virtualization Virtual Service Agent for Microsoft Application Virtualization (MS App-V) platform allows applications to be deployed in real-time to any client from a virtual application server. It removes the need for local installation of the applications. Instead, only the App-V client needs to be installed on the client machines. All application data is permanently stored on the virtual application server.

Overview

sftvsa.exe runs as a service under the name sftvsa (sftvsa) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:sftvsa.exe
Publisher:Microsoft Corporation
Product name:Microsoft Application Virtualization
Description:Microsoft Application Virtualization Virtual Service Agent
Typical file path:C:\Program Files\microsoft application virtualization client\sftvsa.exe
File version:4.6.3.24650
Size:202.66 KB (207,528 bytes)
Build date:6/25/2013 8:02 PM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, December 7, 2009
Expiration date:Monday, March 7, 2011
Digital DNA
PE subsystem:Windows GUI
Entropy:6.364202
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • sftvsa
  • 'sftvsa' (Application Virtualization Service Agent)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00009363%
0.028634%
Kernel CPU:0.00005915%
0.013761%
User CPU:0.00003448%
0.014873%
Kernel CPU time:8,456 ms/min
100,923,805ms/min
CPU cycles:12,259/sec
17,470,203/sec
Memory
Private memory:1.53 MB
21.59 MB
Private (maximum):4.69 MB
Private (minimum):2.27 MB
Non-paged memory:1.53 MB
21.59 MB
Virtual memory:40.83 MB
140.96 MB
Virtual memory (peak):41.9 MB
169.69 MB
Working set:2.4 MB
18.61 MB
Working set (peak):5.4 MB
37.95 MB
Page faults:2,568/min
2,039/min
I/O
I/O read transfer:23 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:13 Bytes/sec
448.09 KB/min
I/O other operations:3/sec
1,671/min
Resource allocations
Threads:4
12
Handles:85
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\microsoft application virtualization client\sftvsa.exe"
Owner:SYSTEM
Windows Service
Service name:sftvsa
Display name:sftvsa
Description:“Monitors global service events and launches virtual services.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
wow64.dll
Total CPU:0.00016391%
0.272967%
Kernel CPU:0.00012093%
0.107585%
User CPU:0.00004298%
0.165382%
CPU cycles:1,347/sec
5,741,424/sec
Memory:252 KB
1.16 MB
sftvsa.exe (main module)
Total CPU:0.00014891%
Kernel CPU:0.00008020%
User CPU:0.00006872%
CPU cycles:2,434/sec
Memory:208 KB
ntdll.dll
Total CPU:0.00007822%
Kernel CPU:0.00000000%
User CPU:0.00007822%
CPU cycles:110/sec
Memory:1.66 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 89.16%
Windows 7 Home Basic 8.43%
Windows 7 Starter 2.41%

Distribution by countryDistribution by country

United States installs about 60.49% of Microsoft Application Virtualization.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 27.64%
Dell 17.89%
Hewlett-Packard 17.07%
Sony 13.01%
Acer 10.57%
ASUS 4.88%
MSI 3.25%
Lenovo 3.25%
Samsung 1.63%
GIGABYTE 0.81%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE