home

Xda.Shell.exe

Xerox Device Agent

Xerox Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DSCRun’.
Publisher:
Xerox Corporation  (signed and verified)

Product:
Xerox Device Agent

Version:
4.3.33.0

MD5:
6c3b718926f473554a167ba50fb57b7a

SHA-1:
edc95ad3893a0eb347834afa4edd3c417ae3c2ad

SHA-256:
d092d6aa0959be6a81c073bce669d884962e556abd3b463ac70ba63d8252eabf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 6:19:23 AM UTC  (today)

File size:
826.1 KB (845,904 bytes)

Product version:
4.3.33.0

Copyright:
� 2007, Xerox Corporation

Original file name:
Xda.Shell.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\xerox corporation\xda lite\bin\xda.shell.exe

Digital Signature
Signed by:
Xerox Corporation

Authority:
COMODO CA Limited

Valid from:
12/20/2013 1:00:00 AM

Valid to:
12/21/2014 12:59:59 AM

Subject:
CN=Xerox Corporation, O=Xerox Corporation, STREET="800 Phillips Road, Bldg 111", L=Webster, S=New York, PostalCode=14580, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A2DC529BE6FC3EDAA40EFEE1AF5CD177

File PE Metadata
Compilation timestamp:
4/21/2014 5:18:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:viot3BbmtnZhxygc5KiN2eo+hBZXf+U3BpxVOU6T9rN3BbmtnZhxygc5KiN2eo+b:vzJ+20Tr

Entry address:
0x742AE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
457 KB (467,968 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DSCRun

Command:
"C:\Program Files\xerox corporation\xda lite\bin\xda.shell.exe" hide


Scan Xda.Shell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.