Rocky Raccoon

VeeamAuth.exe

by Veeam
Backup

Summary

Veeam authentication service

VeeamAuth.exe is the 2176th most commonly executed Windows program in EchoTrail's dataset, observed 251 times across enterprise environments. It typically runs from D:\Program Files\Veeam\Plugins\AWS\Service.

2176th
most commonly executed Windows program
251
observed executions
low
statistical confidence

Behavior

Top Paths

  • D:\Program Files\Veeam\Plugins\AWS\Service27.89%
  • D:\Program Files\Veeam\Plugins\Microsoft Azure\Service26.29%
  • C:\Program Files\Veeam\Plugins\GCP\Service21.91%
  • C:\Program Files\Veeam\Plugins\Kasten K10\Service21.12%
  • D:\Program Files\Veeam\Plugins\Kasten K10\Service1.99%
  • D:\Program Files\Veeam\Plugins\GCP\Service0.8%

Top Hashes (SHA256)

  • dc45c0ca5aa767cd240f6320a6111191027d1800ad2af385de708f773e6e0a5c49.8%
  • 1d68422383980d9e6d1261500b4f6951da0f928b966200f31b061739511756d325.5%
  • 1070c4a42de4ebe3c093fbf00c59eafbbd53c2962956b99361b9edd112a9913b24.7%

Ask Rocky about VeeamAuth.exe

Rocky answers questions about VeeamAuth.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.