» accesschk.exe
Overview
Analysis
File Details
Programs (1)
Downloads (1)

accesschk.exe

Sysinternals AccessChk

Microsoft Corporation

This is installed with Sysinternals Software. The file has been seen being downloaded from live.sysinternals.com.

File name:

accesschk.exe

Publisher:

Sysinternals - www.sysinternals.com (signed by Microsoft Corporation)

Product:

Sysinternals AccessChk

Description:

Reports effective permissions for securable objects

Version:

6.0

MD5:

89b5a61352989fec2d6e32072c10fd28

SHA-1:

729c11aa6a21ac581e15aa2d4d4ca973cd950a6c

SHA-256:

8c1bdd25164d2f8473a25c6a8de803701df79040b6e3eef7df66ac6c94a9ba9b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/24/2024 9:09:15 PM UTC (today)

File size:

667.1 KB (683,160 bytes)

Product version:

6.0

Original file name:

accesschk.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

4/22/2014 12:39:00 PM

Valid to:

7/22/2015 12:39:00 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

33000000CA6CD5321235C4E1550001000000CA

File PE Metadata

Compilation timestamp:

5/25/2015 6:50:23 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

12.0

CTPH (ssdeep):

6144:x1IoFgzt805vglDPCXDjh7RIAj0hUHwNkWT4sXqm059FV0Gn:bIoFgztH5sqzH7ckdd5DV0E

Entry address:

0xB0C9

Entry point:

E8, DE, 73, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 20, AA, 44, 00, 33, C5, 89, 45, FC, 83, 7D, 08, FF, 57, 74, 09, FF, 75, 08, E8, 54, 29, 00, 00, 59, 83, A5, E0, FC, FF, FF, 00, 8D, 85, E4, FC, FF, FF, 6A, 4C, 6A, 00, 50, E8, A3, E8, FF, FF, 8D, 85, E0, FC, FF, FF, 83, C4, 0C, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC... 
[+]

Entropy:

4.3790

Code size:

101.5 KB (103,936 bytes)

The file accesschk.exe has been discovered within the following program.

Sysinternals Software by Sysinternals - www.sysinternals.com

technet.microsoft.com/en-us/sysinternals/bb545027.aspx

4% remove it

The file accesschk.exe has been seen being distributed by the following URL.

http://live.sysinternals.com/accesschk.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.