Versions

5,3,20,1	6.25%
5,3,20,1	68.75%
5,3,16,2	18.75%
5,3,10,2	6.25%

There are 4 versions of vseamps.exe in the wild, the latest version being 5,3,20,1. It is started as a Windows Service with the name 'vseamps' and described as “AVSDK5 On Access API”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 112.59 KB. The file is a digitally signed and issued to Commtouch by VeriSign. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 2.16 MB and typical read I/O operations are around 19.62 KB per minute.