» xclean_micro.exe
Overview
Analysis
File Details

xclean_micro.exe

FaceTime Communications

File name:

xclean_micro.exe

Publisher:

XBlock.com (signed by FaceTime Communications)

Description:

X-Cleaner

Version:

1.1.1.8

MD5:

af4efd3de57389eb1f2ed0483e9425e5

SHA-1:

483dd5e57e63d1d95b60448cc626f1799b62020c

SHA-256:

c45fc3d1ac28bce46f86d3ba08578eca057a0755c7e2e2740744e22a17ac2c34

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

5/9/2024 7:35:46 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/170.3

Quick Heal

(Suspicious) - DNAScan

12.15.11.00

File size:

479.3 KB (490,784 bytes)

Product version:

1.0.0.0

Trademarks:

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

FaceTime Communications

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/31/2005 4:33:04 PM

Valid to:

8/31/2007 4:33:04 PM

Subject:

CN=FaceTime Communications, OU=Secure Application Development, O=FaceTime Communications, L=Foster City, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21BB45

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:a6DnNXlXheqBGyyDPuS/O6KzdAdU++/sIasIDGWovfIcNoXt/NU4hSos/mDUpgMF:acfkYGyyDGS/Rq+aIVYodFhSoWrgti

Entry address:

0x1000

Entry point:

68, 01, A0, 51, 00, E8, 01, 00, 00, 00, C3, C3, 49, E6, B8, CA, D7, C9, 33, 2A, 8B, F4, 3F, 50, 7E, 95, 67, CE, 09, C5, 53, 3B, FA, D5, 86, 0F, 1C, DB, 14, 84, 48, 71, 59, 01, B4, BC, CF, 97, 71, 8A, F1, 94, CC, A1, EB, 71, AF, 39, 96, A7, C5, 1A, D5, C0, 38, F9, 01, 59, 69, FF, EE, 5B, 52, 49, F7, DD, D6, 79, BE, 3D, A0, D8, 72, D9, 57, C6, 04, 6D, C5, 05, 12, DD, DB, DA, 7C, D1, FA, 45, 89, 12, C4, B1, 03, B6, 22, E0, A1, 92, 43, CA, 02, 67, B3, AA, 2B, 8E, 1E, FA, 1F, BF, D9, BD, 4B, C3, 29, 67, 22, 06... 
[+]

Entropy:

7.9640

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

474.5 KB (485,888 bytes)

Scan xclean_micro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.