home

VirtFile.sys

Symantec Backup Exec for Windows Servers

Veritas Technologies LLC

It runs as a Windows file system device driver named “VirtFile”.
Publisher:
Symantec Corporation  (signed by Veritas Technologies LLC)

Product:
Symantec Backup Exec(TM) for Windows Servers

Description:
Allows granular display of back ups.

Version:
2.3.298

MD5:
1d254c459a13806e7490bd1d5c17eda6

SHA-1:
73a4e90d2b63fcfe69ac8b7504450d502f6d177f

SHA-256:
8d7fc65733fc30b2ebbbd38d8776943654ec2fcce75a8a2284d1bf9b3e5c30b7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2025 10:20:35 PM UTC  (today)

File size:
93.1 KB (95,320 bytes)

Product version:
2.3.298

Copyright:
© 2005 Symantec Corporation. All rights reserved. Use of this product is subject to license terms.

Trademarks:
Backup Exec is a trademark of Symantec Corporation

Original file name:
VirtFile.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\virtfile.sys

Digital Signature
Signed by:
Veritas Technologies LLC

Authority:
VeriSign, Inc.

Valid from:
3/23/2016 5:30:00 AM

Valid to:
3/24/2017 5:29:59 AM

Subject:
CN=Veritas Technologies LLC, OU=Configuration Management, O=Veritas Technologies LLC, L=Heathrow, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
796A426D3E99DD70A04ED4BD17B78171

File PE Metadata
Compilation timestamp:
7/27/2016 12:08:17 AM

OS version:
6.3

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
12.0

CTPH (ssdeep):
1536:dIAhUlrUsGL1aAZbwONAm6KEuk6e1//u48P9zEnr/KPO:dLhwUVL1a6bwiVk6e1//u4IEn2m

Entry address:
0x1A3AA

Entry point:
8B, FF, 55, 8B, EC, E8, 06, 00, 00, 00, 5D, E9, 46, FC, FF, FF, 8B, FF, 55, 8B, EC, 51, 51, A1, 2C, 21, 41, 00, B9, 4E, E6, 40, BB, 85, C0, 74, 04, 3B, C1, 75, 18, 0F, 31, 35, 2C, 21, 41, 00, 89, 55, FC, A3, 2C, 21, 41, 00, 75, 07, 8B, C1, A3, 2C, 21, 41, 00, F7, D0, A3, 28, 21, 41, 00, 8B, E5, 5D, C3, 5C, 00, 4C, 00, 6F, 00, 67, 00, 00, 00, 0A, 56, 69, 72, 74, 46, 69, 6C, 65, 3A, 44, 72, 69, 76, 65, 72, 45, 6E, 74, 72, 79, 20, 43, 6F, 75, 6C, 64, 6E, 27, 74, 20, 61, 6C, 6C, 6F, 63, 61, 74, 65, 20, 70, 6F...
 
[+]

Entropy:
6.3701

Code size:
68 KB (69,632 bytes)

Driver
Display name:
VirtFile

Description:
Allows granular display of back ups.

Type:
File system 'filter' driver (FileSystemDriver)

Group:
FSFilter Continuous Backup

Depends on:
FltMgr


Scan VirtFile.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.