home

xHCIdrv.sys

xHCI Compliance Driver

USB Implementers Forum, Inc.

It runs as a Windows 64-bit kernel mode device driver named “xHCI Compliance Test Host Controller”.
Publisher:
Windows (R) Win 7 DDK provider  (signed by USB Implementers Forum, Inc.)

Product:
xHCI Compliance Driver

Description:
xHCIdrv.sys

Version:
1.0.3.11

MD5:
52d6512c9f470fc6fe933d78c9ba78a8

SHA-1:
ec8ec85113cdf6905b95ec40d8a68774ce964f3e

SHA-256:
e97d226764b3938ebcbd3826b5c789431062079a31c0c41cad960b9fed402295

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/29/2024 5:03:32 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.Agent.lJ2j
2.1.4+

File size:
119.9 KB (122,800 bytes)

Product version:
1.0.3.11

Copyright:
Copyright (C) Intel Corp. 2009-2011

Original file name:
xHCIdrv.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\xhcidrv.sys

Digital Signature
Signed by:
USB Implementers Forum, Inc.

Authority:
GlobalSign nv-sa

Valid from:
2/17/2016 11:07:33 PM

Valid to:
9/9/2017 6:08:44 PM

Subject:
E=admin@usb.org, CN="USB Implementers Forum, Inc.", O="USB Implementers Forum, Inc.", L=Beaverton, S=OR, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B8E2D85D5F4AA7BDBD6C9B695ABD4B41

File PE Metadata
Compilation timestamp:
2/23/2016 9:32:09 PM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
14.0

CTPH (ssdeep):
3072:B27mry4O7grVdDU5UA4lxPgPuzx/k8455JJwxh/:sCyKxU5UA4Du3Uh

Entry address:
0x5A50

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 93, B6, 01, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, 02, 00, 00, 00, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 6C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 20, 33, ED, 48, 8B, F2, 48, 8B, F9, 48, 85, C9, 75, 0A, E8, 5E, B5, 01, 00, E9, E0, 00, 00, 00, 48, 89, 0D, 1A, 67, 01, 00, 48, 8D, 05, 2B, 67, 01, 00, 48, 8D, 0D, 2C, 69, 01, 00, 48, 89, 05, 2D, 69, 01, 00, C7, 05, 1B, 69, 01, 00, 00, 00, 08, 02, FF, 15, 85...
 
[+]

Code size:
100.5 KB (102,912 bytes)

Driver
Display name:
xHCI Compliance Test Host Controller

Service name:
XHCIdrv

Type:
Kernel device driver (KernelDriver)


Scan xHCIdrv.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.