» x-raypc.exe
Overview
Analysis
File Details

x-raypc.exe

FaceTime Communications

File name:

x-raypc.exe

Publisher:

FaceTime Communications (signed and verified)

Version:

1.0.0.17

MD5:

8b50d3d92132e5bb00e86251ae0bfe1e

SHA-1:

31e2570a8fcbba1bc5ec108545f129b6aa7937f4

SHA-256:

18139580a449f5499431069b174f9090c7f1cbcbdc06067926cff308bd5dce60

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 10:13:06 AM UTC (today)

Scan engine

Detection

Engine version

Quick Heal

(Suspicious) - DNAScan

1.15.12.00

Trend Micro House Call

TROJ_GEN.F47V0725

7.2.5

File size:

334.8 KB (342,784 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

FaceTime Communications

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/1/2005 1:33:04 AM

Valid to:

9/1/2007 1:33:04 AM

Subject:

CN=FaceTime Communications, OU=Secure Application Development, O=FaceTime Communications, L=Foster City, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21BB45

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:D4/ZrkmoeO97vaqqe/uIFZURvCWHmvbhwpL4F5JJ91tWXDCbtx7M5uYA:q7od9fhGI6dHobyLw5JJPtjtxYA

Entry address:

0x1000

Entry point:

68, 01, B0, 4D, 00, E8, 01, 00, 00, 00, C3, C3, 19, F1, AC, 32, 69, CE, 94, 4D, C9, A4, 1F, B7, BA, 27, 07, 6E, D0, F9, EA, 0F, 83, 0D, 8D, 94, 5A, D4, 54, 1E, 62, 59, CE, AE, 13, DA, DE, E1, E7, EF, B0, 62, 90, D4, EA, FF, A9, 54, 93, D3, 6A, 03, 02, 0A, 98, D8, D5, E3, E3, 5C, 68, AC, 18, 08, 0A, 24, EC, 8B, F8, 5E, 19, EF, FB, 04, C9, 39, 4C, 78, AB, 2D, 9A, 09, C6, 81, C9, FA, 57, 94, 49, AA, CC, A4, 8A, A1, 83, 08, FF, F7, 9C, 6B, C1, C4, E8, BE, 03, 4C, D3, 6F, FF, CE, 5A, DC, 27, 43, BA, 64, D3, 9B... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

585.5 KB (599,552 bytes)

Scan x-raypc.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.