home

CVH.exe

Microsoft Office 2010

Microsoft Corporation

This is installed with multiple programs including Microsoft Office Klik-en-Klaar 2010 and Microsoft Office Click-to-Run 2010. The file has been seen being downloaded from dc482.4shared.com.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2010

Description:
Microsoft Office Client Virtualization Handler

Version:
14.0.6114.5003

MD5:
859642746b575ece7deae9915631cb87

SHA-1:
5cdb5a3456bb8440c07975247287e4f58c6dddb1

SHA-256:
5953571f985230413d4e2d670cd5f59c4da4e57d97a00e243fdbcb473322b980

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/17/2024 11:18:18 AM UTC  (today)

File size:
3.1 MB (3,208,032 bytes)

Product version:
14.0.6114.5003

Copyright:
© 2010 Microsoft Corporation. All rights reserved.

Original file name:
CVH.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\common files\microsoft shared\virtualization handler\cvh.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
11/1/2011 6:39:17 PM

Valid to:
2/1/2013 5:49:17 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
611AF5EA00000000006A

File PE Metadata
Compilation timestamp:
1/4/2012 9:12:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:gwMrKBUvda2aDo7IbSb0OuIHKEFfCo4HSE3utBc6UHMX9LHkJE7AJt:kFIbU0sqEFKmE37yDgt

Entry address:
0x120263

Entry point:
E8, 2C, FC, FF, FF, E9, 37, FD, FF, FF, FF, 25, 60, 11, 00, 2E, 8B, FF, 55, 8B, EC, F6, 45, 08, 02, 57, 8B, F9, 74, 25, 56, 68, 57, 09, 12, 2E, 8D, 77, FC, FF, 36, 6A, 0C, 57, E8, B7, 01, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, CD, FF, FF, FF, 59, 8B, C6, 5E, EB, 14, E8, AC, 06, 00, 00, F6, 45, 08, 01, 74, 07, 57, E8, B6, FF, FF, FF, 59, 8B, C7, 5F, 5D, C2, 04, 00, FF, 25, 54, 11, 00, 2E, FF, 25, 48, 11, 00, 2E, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1...
 
[+]

Entropy:
6.6376

Code size:
2.5 MB (2,634,240 bytes)

Shell Open Command
Open type:
wordhtmlfile

Command:
"C:\Program Files\common files\microsoft shared\virtualization handler\cvh.exe" "microsoft word starter 2010 9014006604090000" "%1" %*


The file CVH.exe has been discovered within the following programs.

Hacer clic y ejecutar de Microsoft Office 2010  by Microsoft Corporation
Publisher's description - “Hacer clic y ejecutar es una nueva forma de entregar y actualizar Microsoft Office para los clientes de banda ancha. Hacer clic y ejecutar utiliza la virtualización de Microsoft y tecnologías de transmisión por secuencias.”
support.microsoft.com/kb/2028653/es
8% remove it
Microsoft Office « Démarrer en un clic » 2010  by Microsoft Corporation
Publisher's description - “Office « Démarrer en un clic » fait appel à la technologie d’émission en continu et de virtualisation de Microsoft. Celle-ci permet de réduire sensiblement la durée de téléchargement.”
office.microsoft.com
12% remove it
Microsoft Office a portata di clic 2010  by Microsoft Corporation
Publisher's description - “Microsoft Office a portata di clic è un nuovo sistema di distribuzione del software ottimizzato per gli utenti privati che dispongono di connessioni a banda larga (almeno 1 Mbps).”
5% remove it
Microsoft Office Click-to-Run 2010  by Microsoft Corporation
Office Click-to-Run is a new way for broadband customers to obtain Microsoft Office and to update Office 2010. Office Click-to-Run uses the virtualization and streaming technologies of Microsoft.
12% remove it
Microsoft Office Klick-und-Los 2010  by Microsoft Corporation
Publisher's description - “Klick-und-Los ist eine neue Technologie für die Bereitstellung und Aktualisierung von Microsoft Office für Kunden mit Breitbandverbindungen, der auf die Streaming- und Virtualisierungstechnologie von Microsoft aufsetzt.”
4% remove it
Microsoft Office Klik og kør 2010  by Microsoft Corporation
Publisher's description - “Opdateringerne af Klik og kør-produkter skubbes automatisk til computeren, men det kan være nødvendigt at lukke Office-programmerne, før opdateringerne kan anvendes.”
4% remove it
Microsoft Office Klik-en-Klaar 2010  by Microsoft Corporation
Publisher's description - “Microsoft Office Click-to-Run uses Microsoft streaming and virtualization technology to significantly reduce the time that is required for you to download and begin experiencing the new features of Microsoft Office 2010.”
4% remove it
Microsoft Office Klikk og bruk 2010  by Microsoft Corporation
7% remove it
Microsoft Office Klikni a spusti 2010  by Microsoft Corporation
1% remove it
 
Powered by Should I Remove It?

The file CVH.exe has been seen being distributed by the following URL.

http://dc482.4shared.com/download/.../Microsoft_Office_Picture_Manag.EXE

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.