home

vchk.exe

Command AntiVirus for Windows

Authentium, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CSAV_CheckViruses’.
Publisher:
Authentium, Inc.  (signed and verified)

Product:
Command AntiVirus for Windows

Version:
4,94,107,521

MD5:
522d898f44d6554b16171232f4ee2610

SHA-1:
026dae20b7a81b2b7b48054d39af4f1d944d8e97

SHA-256:
38560c1a8002285eb5b2913be42cb47ce8a540223bbda1724e9654dc80bdc172

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:07:46 PM UTC  (today)

File size:
73.3 KB (75,056 bytes)

Product version:
4,80,2,30128

Copyright:
Copyright ©2000-2007

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\authentium\command antivirus\vchk.exe

Digital Signature
Signed by:
Authentium, Inc.

Authority:
VeriSign, Inc.

Valid from:
11/7/2007 7:00:00 PM

Valid to:
11/7/2010 6:59:59 PM

Subject:
CN="Authentium, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Authentium, Inc.", L=Palm Beach Gardens, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1FD0CD0B3622BB848EADA688CA216F01

File PE Metadata
Compilation timestamp:
6/1/2008 4:40:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:aHRdRZ5wk9HbjWkhvYE3lInscK/rn7Nd+ubu8gB:EdRZ9xbrVV7NUubu5

Entry address:
0x1D0D

Entry point:
E8, 24, 1A, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, A0, E0, 40, 00, 75, 02, F3, C3, E9, A4, 1A, 00, 00, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, 5A, 1E, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, EB, 1D, 00, 00, 83, C4, 14, 83, C8, FF, E9, C5, 00, 00, 00, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 3B, FB, 74, 24, 3B, F3, 75, 20, E8, 2A, 1E, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, BB, 1D, 00, 00, 83, C4, 14, 83, C8, FF, E9, 93, 00, 00, 00, 81, FF, FF, FF, FF, 3F, C7, 45, EC...
 
[+]

Entropy:
5.8856

Code size:
40 KB (40,960 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CSAV_CheckViruses

Command:
C:\Program Files1\authen~1\comman~1\vchk.exe


Scan vchk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.