vssvc.exe
Microsoft Volume Shadow Copy Service by Microsoft
| Version: | 6.2.9200.16384 (win8_rtm.120725-1247) | 
| MD5: | 700f5256dfcf1e65837f740ee0889f0f | 
| SHA1: | a77911a99b3082eca28a04f817d4d9f468e7507f | 
| SHA256: | 491ba23fb51ba32897101f1e97c9635f720961ba2115d2fd336112f9bc802248 | 
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is vssvc.exe?
The Volume Shadow Copy Service provides the backup infrastructure for the Microsoft Windows, as well as a mechanism for creating consistent point-in-time copies of data known as shadow copies. The Volume Shadow Copy Service can produce consistent shadow copies by coordinating with business applications, file-system services, backup applications, fast-recovery solutions, and storage hardware. 
About vssvc.exe (from Microsoft)
“The Volume Shadow Copy Service (VSS) is a set of COM APIs that implements a framework to allow volume backups to be performed while applications on a system continue to write to the volumes. VSS provi”
 Details
Details
| File name: | vssvc.exe | 
| Publisher: | Microsoft Corporation | 
| Product name: | Microsoft® Volume Shadow Copy Service | 
| Description: | Microsoft® Windows® Operating System | 
| Typical file path: | C:\Windows\System32\vssvc.exe | 
| Original name: | VSSVC.EXE.MUI | 
| File version: | 6.2.9200.16384 (win8_rtm.120725-1247) | 
| Product version: | 6.2.9200.16384 | 
| Size: | 1.1 MB (1,150,464 bytes) | 
| Digital DNA | 
| PE subsystem: | Windows GUI | 
| Entropy: | 6.003843 | 
| File packed: | No | 
| Code language: | Microsoft Visual C++ | 
| .NET CLR: | No | 
More details
 Behaviors
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'VSS'  (Kötet árnyékmásolata)
- 'VSS' 
 Resource utilization
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
| CPU | 
| Total CPU: | 0.42525615% |  | 
| Kernel CPU: | 0.27969809% |  | 
| User CPU: | 0.14555807% |  | 
| Kernel CPU time: | 102 ms/min |  | 
| Context switches: | 46/sec |  | 
| Memory | 
| Private memory: | 3.03 MB |  | 
| Private (maximum): | 8.63 MB |  | 
| Private (minimum): | 8.59 MB |  | 
| Non-paged memory: | 3.03 MB |  | 
| Virtual memory: | 49.97 MB |  | 
| Virtual memory (peak): | 56.11 MB |  | 
| Working set: | 8.53 MB |  | 
| Working set (peak): | 13.78 MB |  | 
| Resource allocations | 
| Threads: | 12 |  | 
| Handles: | 210 |  | 
 
 Process properties
Process properties
| Integrety level: | System | 
| Platform: | 32-bit | 
| Command line: | C:\Windows\System32\vssvc.exe | 
| Owner: | SYSTEM | 
| Windows Service | 
| Service name: | VSS | 
| Display name: | Kötet árnyékmásolata | 
| Description: | “Gere e implementa cópias sombra de volume utilizadas para cópia de segurança, entre outros propósitos. Se este serviço for parado, as cópias sombra não estarão disponíveis para cópia de segurança e esta poderá falhar. Se este serviço estiver desactivado, não será possível iniciar qualquer serviço que dependa explicitamente dele.” | 
| Type: | Win32OwnProcess | 
| Parent process: | services.exe (Services and Controller app by Microsoft) | 
 Threads
Threads
Averages
 
| ntdll.dll | 
| Total CPU: | 0.01965739% |  | 
| Kernel CPU: | 0.01965739% |  | 
| User CPU: | 0.00000000% |  | 
| CPU cycles: | 643,006/sec |  | 
| Context switches: | 4/sec |  | 
| Memory: | 1.4 MB |  | 
| msvcrt.dll | 
| Total CPU: | 0.01839173% |  | 
| Kernel CPU: | 0.00919496% |  | 
| User CPU: | 0.00919677% |  | 
| CPU cycles: | 1,695,493/sec |  | 
| Context switches: | 5/sec |  | 
| Memory: | 708 KB |  | 
| sechost.dll | 
| CPU cycles: | 585,718/sec |  | 
| Context switches: | 3/sec |  | 
| Memory: | 208 KB |  | 
 
 Distribution by Windows OS
Distribution by Windows OS
| OS version | distribution | 
| Windows 7 Home Premium | 57.50% |  | 
| Windows 7 Ultimate | 25.50% |  | 
| Windows 7 Professional | 9.00% |  | 
| Windows Vista Home Premium | 4.50% |  | 
| Windows 7 Home Basic | 2.00% |  | 
| Windows 7 Starter | 1.00% |  | 
| Windows Vista Home Basic | 0.50% |  | 
 Distribution by country
Distribution by country
United States installs about 51.76% of Microsoft® Volume Shadow Copy Service.
 Distribution by PC manufacturer
Distribution by PC manufacturer
| PC Manufacturer | distribution | 
| Dell | 25.19% |  | 
| Hewlett-Packard | 20.61% |  | 
| ASUS | 12.98% |  | 
| Toshiba | 12.21% |  | 
| Acer | 10.31% |  | 
| Lenovo | 3.82% |  | 
| Sony | 3.05% |  | 
| GIGABYTE | 3.05% |  | 
| Samsung | 2.29% |  | 
| MSI | 2.29% |  | 
| Gateway | 1.53% |  | 
| Alienware | 0.76% |  | 
| Medion | 0.76% |  | 
| Intel | 0.76% |  | 
| Sahara | 0.38% |  |