Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.75%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.10%
6.3.9600.16384 (winblue_rtm.130821-1623)	2.62%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.24%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.05%
6.2.9200.16384 (win8_rtm.120725-1247)	0.78%
6.2.9200.16384 (win8_rtm.120725-1247)	0.78%
6.2.9200.16384 (win8_rtm.120725-1247)	0.49%
6.2.9200.16384 (win8_rtm.120725-1247)	2.04%
6.2.9200.16384 (win8_rtm.120725-1247)	8.11%
6.2.9200.16384 (win8_rtm.120725-1247)	3.50%
6.2.9200.16384 (win8_rtm.120725-1247)	0.24%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.05%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.10%
6.1.7600.16385 (win7_rtm.090713-1255)	5.83%
6.1.7600.16385 (win7_rtm.090713-1255)	40.99%
6.1.7600.16385 (win7_rtm.090713-1255)	18.80%
6.1.7600.16385 (win7_rtm.090713-1255)	3.64%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	0.19%
6.0.6001.18000 (longhorn_rtm.080118-1840)	6.85%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840)	1.46%
6.0.6001.18000 (longhorn_rtm.080118-1840)	0.44%
6.0.6000.16386 (vista_rtm.061101-2205)	0.44%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710)	0.05%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710)	0.10%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 31 versions of vds.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'Disco virtual' with the name 'vds' and described as “Proporciona servicios de administración para discos, volúmenes, sistemas de archivos y matrices de almacenamiento.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 594 KB. Some variations of the file have been seen to be installed with the program EventTrackerAgent from Prism Microsystems Inc.. During the process's lifecycle, the typical CPU resource utilization is about 0.0014% including both foreground and background operations, the average private memory consumption is about 7.02 MB with the maximum memory reaching around 8.7 MB. Addionally, typically read and write I/O disk operations is about 4.03 KB per minute for reads and 0 Bytes per minute for writes.

The Virtual Disk Service (VDS) manages a wide range of storage configurations, from single-disk desktops to external storage arrays. The service exposes an application programming interface (API).