home

comparevers.exe

CompareVers

Microsoft Corporation

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
CompareVers

Description:
Core Versions Compare

Version:
1.0.0.0

MD5:
b0d6b3f268bba6c80de24997e4bdf3ce

SHA-1:
cef8f47bacb859cf39b6a340e9d1808d6ea53f31

SHA-256:
da1de1922523a35febd9c274f1611cdc7bbb571fba682f16138b9ca16f1ab88a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/22/2024 8:54:34 PM UTC  (today)

File size:
477.1 KB (488,584 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013 Microsoft Corporation

Original file name:
comparevers.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Windows\System32\comparevers.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation Certificate Authority

Valid from:
11/8/2013 10:07:44 PM

Valid to:
11/8/2043 10:07:44 PM

Subject:
CN=Microsoft Corporation

Issuer:
CN=Microsoft Corporation Certificate Authority

Serial number:
2CFAD257C53604F0A8DCE6229F634DE4

File PE Metadata
Compilation timestamp:
12/30/2012 2:50:31 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:VRwl5xA0NOKy90qptyYFQcr6QA2Wp0POhlC6Gt5N:UkrKybp5FQMip02hlTGt5N

Entry address:
0x1BCE0

Entry point:
48, 83, EC, 28, E8, F3, 01, 00, 00, 48, 83, C4, 28, E9, EA, FC, FF, FF, FF, 25, 50, 19, 00, 00, FF, 25, 52, 19, 00, 00, FF, 25, 54, 19, 00, 00, FF, 25, 56, 19, 00, 00, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 2C, 83, 78, 18, 04, 75, 26, 8B, 40, 20, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 07, FF, 15, 9A, 19, 00, 00, CC, 33, C0, 48, 83, C4, 28, C3, CC, CC, 48, 83, EC, 28, 48, 8D, 0D, B1, FF, FF, FF, FF, 15, 47, 13, 00...
 
[+]

Code size:
109 KB (111,616 bytes)

Scheduled Task
Task name:
cvc

Trigger:
Logon (Runs on logon)


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.