Gridinsoft Logo

The ColourCopy(x64).dll File Analysis

Updated 1 day ago
Checked by Malware Check
ColourCopy(x64).dll

Technical Analysis

File Name ColourCopy(x64).dll
File Type
PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-14 03:00:25 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
10,038,784
File Size (bytes)
2025-06-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
91f9861436e34ca27a97875f3e10d822
SHA1
6e3e73a3df827203c6c885c08900c2c37959d1f5
SHA256
fab5c05e03cf874cd007100eb0b7d9cac001f7e51fbcfddf9cdb104d2f50aa7f
SHA512
733e119c7fd5f027961c3a96bfaea99b99f61a9259aabb0670d94ab5c95408a739d19a7b737564172312c23fdd82fada5936d4f2f5cfb1f941090f8061b23c56
ImpHash
d2985ad2a7e7b1385e1ef979e9b5a46b

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x180620c38
Compilation Time 2021-08-04 18:54:47
Checksum 0x00000000 (Actual: 0x009951fa)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
WSOCK32, KERNEL32, USER32, GDI32, SHELL32, ole32, OLEAUT32, ADVAPI32, SHLWAPI
Exports 21 functions
Resources 6 Resources
Sections 7 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 7,393,280 bytes 7,392,256 bytes 6.52 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 369BA666803F2323EA7F809A5C0051F6
.rdata 0x0070e000 1,994,752 bytes 1,991,680 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5FC1CE292B04859B19B01DE5B3233001
.data 0x008f5000 3,555,328 bytes 299,520 bytes 3.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D04D6C20351BC1B26556D72317C4E829
.pdata 0x00c59000 270,336 bytes 267,776 bytes 6.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8AC2C0C0F0EB1E7BF55FBF4CB1538C0A
_RDATA 0x00c9b000 4,096 bytes 512 bytes 1.68 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 308C3410E7850DA34D915EFF98EC5065
.rsrc 0x00c9c000 4,096 bytes 3,584 bytes 3.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FBE0BD048BFC987480EF64CC18B68831
.reloc 0x00c9d000 86,016 bytes 82,432 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 47533AD9516B096534A8521B1C7B1D44
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 6 (2,807 bytes)
Resource Type Count Total Size Percentage
RT_DIALOG 5 2,426 bytes
86.4%
RT_MANIFEST 1 381 bytes
13.6%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware