home

ckscanner.exe

CKScanner

This is a setup program which is used to install the application. The file has been seen being downloaded from api.viglink.com and multiple other hosts.
Product:
CKScanner

Version:
2.4.2.1

MD5:
64036987fdd56acbe09aeb6570b8f128

SHA-1:
a67dc205b111a3e361d07b21f6d547594a617578

SHA-256:
e432a6caffbd03be72f4c8138be5a4b20b56b18547177cc7452d48a0e516b4f6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 4:49:34 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0823
7.2.31

File size:
457.5 KB (468,480 bytes)

Product version:
2.4

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ckscanner.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:jZIQKG4vkpE9ohg60FKiQsHuTctw1kuQI:t54vZGq60FKiQjAa

Entry address:
0x62AE4

Entry point:
55, 8B, EC, 83, C4, F0, B8, 34, 29, 46, 00, E8, 68, 3E, FA, FF, A1, 5C, 40, 46, 00, 8B, 00, BA, 38, 2B, 46, 00, E8, 4F, AD, FF, FF, 8B, 0D, B8, 3E, 46, 00, A1, 5C, 40, 46, 00, 8B, 00, 8B, 15, 88, FE, 45, 00, E8, 13, B1, FF, FF, A1, 5C, 40, 46, 00, 8B, 00, E8, 87, B1, FF, FF, E8, 32, 19, FA, FF, 00, 00, FF, FF, FF, FF, 09, 00, 00, 00, 43, 4B, 53, 63, 61, 6E, 6E, 65, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
391 KB (400,384 bytes)

The file ckscanner.exe has been seen being distributed by the following 2 URLs.

http://api.viglink.com/api/click?format=go&key=daa336e4a8c8dda65775561fba9924ea&loc=http://www.tomsguide.fr/forum/id-2131303/virus-fait-planter-explorer.html&v=1&libId=1ed920e0-910b-4b9c-a282-651e3ac0d5c0&out=http://downloads.malwareremoval.com/CKScanner.exe&ref=https://www.google.com/&title=Virus qui fait planter mon explorer&txt=<span style="color:teal;"><span class="bb-bold"><span class="bb-underline">CKScanner</.../span></span>&jsonp=vglnk_jsonp_13817063361818

http://downloads.malwareremoval.com/CKScanner.exe

Scan ckscanner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.