» sched.exe
Overview
Analysis
File Details
Behaviors (1)

sched.exe

AntiVir Desktop

Avira GmbH

It runs as a separate (within the context of its own process) windows Service named “Avira AntiVir Scheduler”.

File name:

sched.exe

Publisher:

Avira GmbH (signed and verified)

Product:

AntiVir Desktop

Description:

Antivirus Scheduler

Version:

10.00.00.21

MD5:

f41cf66c7082b8fb4aba3fca5307749e

SHA-1:

5c39799e4d754b1019309ede9cbb573884c238ac

SHA-256:

ed740f91e4d944c0d96e485a916a504ae9e699c614a67c4fd39180eec9d293dc

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 4:11:25 AM UTC (today)

Scan engine

Detection

Engine version

F-Prot

W32/Patched.Y.gen

4.6.5.141

File size:

133.2 KB (136,360 bytes)

Product version:

10.00.00.21

Trademarks:

AntiVir® is a registered trademark of Avira GmbH, Germany.

Original file name:

sched.exe

File type:

Executable application (Win32 EXE)

Language:

Arabic (Egypt)

Common path:

C:\Program Files\avira\antivir desktop\sched.exe

Digital Signature

Signed by:

Avira GmbH

Authority:

VeriSign, Inc.

Valid from:

2/11/2009 2:00:00 AM

Valid to:

2/12/2012 1:59:59 AM

Subject:

CN=Avira GmbH, OU=Development 2009, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira GmbH, L=Tettnang, S=Baden-Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

75E809361DAFBE7BD72E0E5BB7659552

File PE Metadata

Compilation timestamp:

2/7/2011 3:28:46 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

3072:9uEJpJrHSna/fXHIUzac9jXXQ8OuyMHXqp:9uE7xynCfXH9OujXXQ8OKS

Entry address:

0x180EE

Entry point:

C3, C3, C3, C3, C3, C3, C3, C3, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 80, 21, 42, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08, 83, E4, F8, DD, 1C, 24, F2, 0F, 2C, 04, 24, C9, C3, 83, 3D, 80, 21, 42, 00, 00, 74, 11, 83, EC, 04, D9, 3C, 24, 58, 66, 83, E0, 7F, 66, 83, F8, 7F, 74, D3, 55, 8B, EC, 83, EC, 20, 83, E4, F0, D9, C0, D9, 54, 24, 18, DF, 7C, 24, 10, DF, 6C, 24, 10, 8B, 54, 24, 18, 8B, 44, 24, 10, 85, C0, 74, 3C, DE, E9, 85, D2, 79, 1E, D9, 1C, 24, 8B, 0C, 24, 81, F1, 00, 00, 00, 80, 81, C1, FF... 
[+]

Entropy:

6.5658

Code size:

99.5 KB (101,888 bytes)

Service

Display name:

Avira AntiVir Scheduler

Service name:

AntiVirSchedulerService

Description:

Service to schedule Avira AntiVir Personal - Free Antivirus jobs and updates.

Type:

Win32OwnProcess

Group:

NetworkProvider

Scan sched.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.