home

usbflashcopy.exe

Imposant

Publisher:
Imposant  (signed and verified)

MD5:
fc35df597cc3231bc3a3625e38ae63ae

SHA-1:
0dd2c1fd37ff7127ea040554b2f27eb5aac0eb56

SHA-256:
57f0fff3d43d4d169e3fa326e7b74c053e537222417fec8c4145e75d27f4b55d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:49:08 AM UTC  (today)

File size:
274 KB (280,584 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\usbflashcopy.exe

Digital Signature
Signed by:
Imposant

Authority:
COMODO CA Limited

Valid from:
8/21/2012 5:00:00 PM

Valid to:
8/22/2017 4:59:59 PM

Subject:
CN=Imposant, O=Imposant, STREET="17-76, Olimpiyskaya derevnya", STREET=Michurinsky prospekt, L=Moscow, S=Moscow, PostalCode=119602, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00AB35D8BB16D774993034FF77BDA941AD

File PE Metadata
Compilation timestamp:
8/30/2013 2:53:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:O8NeKAQwYhpJxucKh5BHfbywbVBvbUsr9WPXJ3ttAmqyUTE/em/Y7vbddr9SUNXB:O8AK6YhpJxmxbywbV95RoJQmqHrn

Entry address:
0x119B5

Entry point:
E8, 59, 4C, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 68, 63, 42, 00, 89, 0D, 64, 63, 42, 00, 89, 15, 60, 63, 42, 00, 89, 1D, 5C, 63, 42, 00, 89, 35, 58, 63, 42, 00, 89, 3D, 54, 63, 42, 00, 66, 8C, 15, 80, 63, 42, 00, 66, 8C, 0D, 74, 63, 42, 00, 66, 8C, 1D, 50, 63, 42, 00, 66, 8C, 05, 4C, 63, 42, 00, 66, 8C, 25, 48, 63, 42, 00, 66, 8C, 2D, 44, 63, 42, 00, 9C, 8F, 05, 78, 63, 42, 00, 8B, 45, 00, A3, 6C, 63, 42, 00, 8B, 45, 04, A3, 70, 63, 42, 00, 8D, 45, 08, A3, 7C, 63, 42, 00, 8B...
 
[+]

Entropy:
5.6903

Code size:
120 KB (122,880 bytes)

The file usbflashcopy.exe has been seen being distributed by the following 3 URLs.

http://c36.softwaretop.net/2107tmp/cf/soft/2013/10/ba/.../usbflashcopy_18.exe

http://www.usbflashcopy.com/.../usbflashcopy.exe

http://www.commentcamarche.net/download/.../telecharger-34079749-usbflashcopy

Scan usbflashcopy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.