home

CopyConfig.exe

CopyConfig

Hawkes Learning Systems

Publisher:
QSI  (signed by Hawkes Learning Systems)

Product:
CopyConfig

Version:
1.00

MD5:
1d8ab06589abf5398686d5139bd32183

SHA-1:
6caadfde902ef7510f85f51816ec210e4d967fdc

SHA-256:
1ace6b752aa48a4fdd443d96b1cd11d592dd97206ecc984c04dbfddf181e7a9d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 11:52:48 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

AVG
Dropper.Generic7
2015.0.3585

File size:
25.1 KB (25,696 bytes)

Product version:
1.00

Original file name:
CopyConfig.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\{7e52b10c-123a-4a7c-af91-69a3a8f2a2b9}\offline\356b99a3\e62e1cbc\copyconfig.exe

Digital Signature
Signed by:
Hawkes Learning Systems

Authority:
The USERTRUST Network

Valid from:
6/18/2007 7:00:00 PM

Valid to:
6/18/2008 6:59:59 PM

Subject:
CN=Hawkes Learning Systems, O=Hawkes Learning Systems, STREET=1023 Wappoo Rd, STREET=Suite A6, L=Charleston, S=SC, PostalCode=29407, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
057C655BBBE8272DAD0F75A8C6E09414

File PE Metadata
Compilation timestamp:
6/12/2007 2:47:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
192:Niy1tIDDvwYcFLuAPN+N30S+9syowJL/hqig2UbMThm0:Ey1tsDvwYcFS2u30S+9sYJLcmTc0

Entry address:
0x1304

Entry point:
68, BC, 13, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 70, 00, 00, 00, 40, 00, 00, 00, CD, 22, DE, 8A, 3B, 5D, 71, 4A, 80, 6B, 21, D2, 54, 90, BE, 56, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 30, 30, 30, 30, 30, 30, 43, 6F, 70, 79, 43, 6F, 6E, 66, 69, 67, 00, 23, 43, 3A, 5C, 57, 43, 6F, 70, 79, 20, 51, 43, 6F, 6E, 66, 69, 67, 20, 66, 69, 6C, 65, 20, 66, 72, 6F, 6D, 20, 75, 73, 65, 72, 20, 74, 6F, 20, 43, 6F, 6D, 6D, 6F, 6E, 20, 4C, 6F, 63, 61, 74, 69, 6F, 6E, 00, 75, 00, 00, 00, 00...
 
[+]

Entropy:
3.8191

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
8 KB (8,192 bytes)

Scan CopyConfig.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.