» xdetect.ocx
Overview
Analysis
File Details
Programs (1)

xdetect.ocx

Napster

This file is installed with the program Napster.

File name:

xdetect.ocx

Publisher:

Napster (signed and verified)

Product:

Napster

Description:

Napster external link handler

Version:

4.5.1.0

MD5:

78827c921c4d9e58c8415d32dd004ef3

SHA-1:

00e85825307225ef6875d5635bf328cd9256299a

SHA-256:

eab6b429310d419a09bdd60d647a0e281f2dd54a059e0fad6c5bc0e54d79e7e9

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 3:50:58 PM UTC (today)

Scan engine

Detection

Engine version

Vba32 AntiVirus

suspected of Trojan-Spy.SCKeyLog.1

15.07.03

File size:

234.1 KB (239,760 bytes)

Product version:

4.5.1.0

Original file name:

xdetect.ocx

File type:

OLE control extension (Win32 OCX)

Language:

English (United States)

Common path:

C:\Program Files\napster\xdetect.ocx

Digital Signature

Signed by:

Napster

Authority:

VeriSign, Inc.

Valid from:

6/11/2006 8:00:00 PM

Valid to:

8/12/2009 7:59:59 PM

Subject:

CN=Napster, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Napster, L=Los Angeles, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

63AA83A91FE96EBCD5ED4178F9422F69

Registration

CLSID:

{C2F18352-A7FC-487E-9B44-8FF0AB12B58B}

ProgID:

Napster.NapLinkHandlerCtrl.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

5/9/2008 5:35:25 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

3072:B342dLSQpY67msB7LCyHV/DWmxxSOEj+k7rSlqsm1fv22Ck5ITslt5voBgHPN:BBTpLBTVJSOEj1r2Rm9v2ra5y6N

Entry address:

0x16DD9

Entry point:

6A, 0C, 68, 48, E8, 4E, 0F, E8, DB, EB, FF, FF, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 0C, 87, 4F, 0F, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, DC, 9F, 4F, 0F, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 75, D0, FE, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Entropy:

6.6605

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

161 KB (164,864 bytes)

The file xdetect.ocx has been discovered within the following program.

Napster by Napster

Publisher's description - “Over 18 million songs in every possible genre. Play as much music as you want on your computer, mobile and home audio system. If it’s music, we have it. Discovering and sharing music is easy when you create your own Music Profile.”

www.napster.com

18% remove it

Scan xdetect.ocx - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.