home

x1setup.exe

X1 Search Setup

X1 Discovery, Inc.

Publisher:
X1 Discovery, Inc.  (signed and verified)

Product:
X1 Search Setup

Version:
1.0.0.455

MD5:
389a8a13d9dc3e27d859cf5bcf5b4a36

SHA-1:
7c9b44bdf3e332a187863faef241fe32452318aa

SHA-256:
7797797481e484acfda2b9e385f9594b79710785282d8ba7234878743e18833d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:23:35 AM UTC  (today)

File size:
2.3 MB (2,433,272 bytes)

Product version:
1.0.0.455

Copyright:
© 2015

Original file name:
X1SearchSetup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\x1 search\x1setup.exe

Digital Signature
Signed by:
X1 Discovery, Inc.

Authority:
Thawte, Inc.

Valid from:
5/26/2014 7:00:00 PM

Valid to:
7/22/2016 6:59:59 PM

Subject:
CN="X1 Discovery, Inc.", O="X1 Discovery, Inc.", L=Pasadena, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
60460424D5C3BDE4CE13ECC114A20CB7

File PE Metadata
Compilation timestamp:
10/27/2015 12:09:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:IsZRibqIjk2cvpX+ICBX39tHSyKuwUfKQryjnlyjju+2TMiRNXstbNAiEOPpaXgp:xibqIZcBu5XSyoTUyjlyjn292paM

Entry address:
0x24964E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0056

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2.3 MB (2,390,016 bytes)

The file x1setup.exe has been seen being distributed by the following 3 URLs.

https://store.x1.com/order/.../FxbQ==

https://store.x1.com/order/servant.php?sid=2Xrl83Gqk6ONsommfs/.../FlbQ==

http://support.x1.com/.../x1searchsetup.exe

Scan x1setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.