» xxcopysu.exe
Overview
Analysis
File Details

xxcopysu.exe

Pixelab, Inc. xxcopy

Pixelab, Inc.

File name:

xxcopysu.exe

Publisher:

Pixelab, Inc. (signed and verified)

Product:

Pixelab, Inc. xxcopy

Description:

xxcopy

Version:

3.06.2

MD5:

3e0e077b85670e24e5a16f5d5d3cda09

SHA-1:

a9e4415dded34fad30788b529ca9571dab83cce8

SHA-256:

1ce82ef29087617ed279fa727dee63d25bc265d96f50a7e11280a0a8f24c8d11

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/7/2024 9:31:01 PM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

W32.Clod1dc.Trojan

1.3.0.4959

File size:

635.6 KB (650,856 bytes)

Product version:

v.3.06.2

Trademarks:

XXCOPY is a trademark of Pixelab, Inc.

Original file name:

xxcopy.exe

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Windows\System32\xxcopysu.exe

Digital Signature

Signed by:

Pixelab, Inc.

Authority:

The USERTRUST Network

Valid from:

2/1/2009 6:00:00 PM

Valid to:

2/2/2011 5:59:59 PM

Subject:

CN="Pixelab, Inc.", O="Pixelab, Inc.", STREET=1212 S. Naper Blvd., STREET=Suite 119, L=Naperville, S=Illinois, PostalCode=60540, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00A84D555A0BB7192141CE310DA5D1EAEA

File PE Metadata

Compilation timestamp:

8/3/2010 4:35:41 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

6144:mmk0u38RLK/LyyK6iqWbPm8BEwLbBlYIr4NoPt+xAVpcetfGbVRoa6pMgqcZO5zC:md0ukKGBqCm8u4QU/HpntfEsqcP73v

Entry address:

0x48240

Entry point:

48, 83, EC, 28, E8, 97, E2, 00, 00, 48, 83, C4, 28, E9, 4E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8D, 59, 1C, 48, 8B, F1, BF, 01, 01, 00, 00, 48, 8B, CB, 4C, 8B, C7, 33, D2, E8, 78, 5B, 00, 00, 45, 33, DB, 4C, 8D, 05, 5E, 51, 03, 00, 44, 89, 5E, 04, 44, 89, 5E, 08, 44, 89, 5E, 0C, 4C, 89, 5E, 10, 4C, 2B, C6, 44, 89, 5E, 18, 66, 66, 90, 66, 66, 66, 90, 41, 0F, B6, 04, 18, 48, 83, C3, 01, 48, 83, EF, 01, 88, 43, FF... 
[+]

Entropy:

6.4516

Code size:

395 KB (404,480 bytes)

Scan xxcopysu.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.