home

XPRepairPro.exe

XPRepairPro2007

DDX SOFTWARE, INC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘XPRepairPro2007’.
Publisher:
ddxSoftware Inc.  (signed by DDX SOFTWARE, INC)

Product:
XPRepairPro2007

Description:
XP Repair Pro 2007

Version:
3.5.6.0

MD5:
efeeda9f99ae4b6de8bb5e2dfcd805b1

SHA-1:
ef03a3601f968e76aecaa267aad1b58d86fdd5e9

SHA-256:
cdba2a23e66c4f15f050ef5fabce7bf3b06371c1158d181ced6587883f3e6e02

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 3:22:27 PM UTC  (today)

Scan engine
Detection
Engine version

Prevx
Heuristic: Suspicious File With Bad Child Associations
3.0.8

File size:
1 MB (1,089,160 bytes)

Product version:
3.5.6.0

Copyright:
Copyright 2007 © ddxSoftware Inc.

Original file name:
XPRepairPro.exe

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\Program Files\xp repair pro 2007\xprepairpro.exe

Digital Signature
Signed by:
DDX SOFTWARE, INC

Authority:
The USERTRUST Network

Valid from:
7/2/2007 3:00:00 AM

Valid to:
7/2/2008 2:59:59 AM

Subject:
CN="DDX SOFTWARE, INC", O="DDX SOFTWARE, INC", STREET=701 Lennox Rd W., L=Palm Harbor, S=Florida, PostalCode=34683, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
20AF501D4C55CF6FE7A167B1675ACF31

File PE Metadata
Compilation timestamp:
9/5/2007 4:40:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:4C81pMBl/RM5cBERf1/ihmpD4EkIHa1WQ1w++z6f3HhHaO:4h8l/sBRssDh8WQ1w++z6fXhL

Entry address:
0xF2CAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
964 KB (987,136 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
XPRepairPro2007

Command:
C:\Program Files\xp repair pro 2007\xprepairpro.exe \r


Scan XPRepairPro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.