» xclean_micro.exe
Overview
Analysis
File Details

xclean_micro.exe

FaceTime Communications

File name:

xclean_micro.exe

Publisher:

XBlock.com (signed by FaceTime Communications)

Description:

X-Cleaner

Version:

1.1.1.11

MD5:

395a2f04ff23840387c241fbad886ad7

SHA-1:

343e3f04bc913156bf3e9d1d58760b7c5c29af17

SHA-256:

029785da150c4dfb2de021f39a93271e60b9f8c40036f7fd7777542fdfe9b2be

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 2:50:19 PM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Adware.Gator!1.6527

23.00.65.15717

File size:

572.3 KB (586,016 bytes)

Product version:

1.0.0.0

Trademarks:

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

FaceTime Communications

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/31/2005 4:33:04 PM

Valid to:

8/31/2007 4:33:04 PM

Subject:

CN=FaceTime Communications, OU=Secure Application Development, O=FaceTime Communications, L=Foster City, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21BB45

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:Qps3E28TaD2qiHRaj3DuIcRS1xRi9y9mQ19A0tD5:QpNTSYRMDfi9y9mCtD5

Entry address:

0x1000

Entry point:

68, 01, 00, 56, 00, E8, 01, 00, 00, 00, C3, C3, 91, 0E, 7B, 42, 5E, 8A, 49, 20, CB, 89, 13, 57, CA, 1A, A6, 2D, 6F, A2, 0F, C4, F5, E1, 47, 5E, 25, 9B, 74, 65, 6C, FD, 37, 45, 00, 6A, 38, CB, 26, 62, 9C, DB, FE, BA, 4D, 26, B2, 7E, C2, 98, 3F, 61, 3C, 18, DC, B8, AD, F3, 0A, C6, 34, 15, 43, 96, 40, BB, A1, BE, E9, CB, 61, EA, 1E, F1, 03, BA, A8, AA, 56, B6, D9, ED, E1, DC, E5, 54, DD, 2D, 68, B6, 03, 59, 4D, 4B, BC, C8, AA, 2D, 35, EB, CD, F5, 72, EF, C3, 9E, 54, 60, B4, 54, CE, EF, 31, 4F, 5C, B8, 38, 5B... 
[+]

Entropy:

7.9698

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

471 KB (482,304 bytes)

Scan xclean_micro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.