» desktopsearchband201013007.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

desktopsearchband201013007.dll

Copernic Desktop Search Band

Copernic Technologies Inc.

This file is installed with the program Copernic Desktop Search 2.

File name:

Publisher:

Copernic Technologies Inc. (signed and verified)

Product:

Copernic Desktop Search Band

Version:

2.1.1.3007

MD5:

1dfffb0d2957271a33bf7d1a0fb51105

SHA-1:

2b952668cb75e791b98bc29b0180b2946055fe14

SHA-256:

4e01fd9748d2da749487303851a13144f13f0edddc00adab88d1217703d0d1f1

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 10:00:25 AM UTC (today)

Scan engine

Detection

Engine version

Prevx

Heuristic: Suspicious Self Modifying File

3.0.12

File size:

1 MB (1,052,192 bytes)

Product version:

DESKTOPSEARCH2BAND 2.1.1 ENG

Original file name:

DesktopSearchBand.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\Program Files\copernic desktop search 2\desktopsearchband201013007.dll

Digital Signature

Signed by:

Copernic Technologies Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

12/20/2006 6:00:00 PM

Valid to:

2/8/2008 5:59:59 PM

Subject:

CN=Copernic Technologies Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Copernic Technologies Inc., L=Sainte-Foy, S=Quebec, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5A10EA937DA314405625BD907E6AFBD8

Registration

CLSIDs:

{968631B6-4729-440D-9BF4-251F5593EC9A}, {9C3FCA1F-99E3-48F2-A7F4-DD3931B2F99A}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:+/drmw2kOJrY4jUJtdlW5A7eMiwtIK2yPvu7ke6qN6+fBNI7T6nR8832tZYpaSn:+pkjUrW5A7eUkJwqRJu/6R8832tS7

Entry address:

0xE2DBC

Entry point:

55, 8B, EC, 83, C4, C4, B8, A4, 25, 4E, 00, E8, 9C, 3D, F2, FF, 66, B8, 3F, 13, E8, 47, EE, FF, FF, A1, 04, 42, 4D, 00, E8, 25, 1B, FF, FF, 8B, 00, E8, B6, 1A, FF, FF, 84, C0, 74, 38, A1, D0, DD, 4B, 00, E8, 44, B3, FD, FF, 33, D2, E8, 71, B3, FD, FF, E8, C4, 0A, FF, FF, 8B, 40, 14, BA, 23, 00, 00, 00, E8, 53, E5, FB, FF, E8, B2, 2D, FF, FF, A1, 48, 50, 4E, 00, 8B, 00, C6, 40, 1D, 00, E8, B2, F6, FF, FF, E8, 65, 18, F2, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.6173

Developed / compiled with:

Microsoft Visual C++

Code size:

904 KB (925,696 bytes)

Internet Explorer Bar

Display name:

HKEY_LOCAL_MACHINE

CLSID:

{968631B6-4729-440D-9BF4-251F5593EC9A}

CLSID name:

Copernic Desktop Search 2

Registry hive:

HKEY_LOCAL_MACHINE

Registry path:

SOFTWARE\Microsoft\Internet Explorer\Explorer Bars

The file desktopsearchband201013007.dll has been discovered within the following program.

Copernic Desktop Search 2 by Copernic Inc.

Copernic Desktop Search is a commercial desktop search utility for the Microsoft Windows family of operating systems. Three versions of the product are made which target different market segments.

www.copernic.com

About 1% of users remove it

Scan desktopsearchband201013007.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.