» xcleaner_full.exe
Overview
Analysis
File Details
Programs (1)

xcleaner_full.exe

X-Cleaner

FaceTime Communications

File name:

xcleaner_full.exe

Publisher:

FaceTime Communications (signed and verified)

Product:

X-Cleaner

Description:

Privacy Solution

Version:

4.0.0.386

MD5:

c9936daa3dabe206d1b7485ee9cd5610

SHA-1:

c8b4bf7eff9ae84925b7487def101d9d7ce4a3d8

SHA-256:

9c2d433e41fba4c302ced458b943325f724c2f036dd77c049adf2f6e5a595c9f

Scanner detections:

4 / 68

Status:

Clean (4 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/23/2024 4:59:53 PM UTC (today)

Scan engine

Detection

Engine version

Dr.Web

DLOADER.Trojan

9.0.1.0187

Quick Heal

(Suspicious) - DNAScan

7.15.12.00

Rising Antivirus

Adware.Gator!4914

23.00.65.15704

Trend Micro House Call

TROJ_GEN.F47V1014

7.2.187

File size:

1021.8 KB (1,046,288 bytes)

Product version:

4.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

FaceTime Communications

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/31/2005 4:33:04 PM

Valid to:

8/31/2007 4:33:04 PM

Subject:

CN=FaceTime Communications, OU=Secure Application Development, O=FaceTime Communications, L=Foster City, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

21BB45

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:9Vo3b983HDso2c6cGrSOsXcfg2SULm8kQqow3dcN/5fhDwdtmQT:9VibuHDZ6c+SjaSULm8wo1hf6fmQT

Entry address:

0x1000

Entry point:

68, 01, 40, 69, 00, E8, 01, 00, 00, 00, C3, C3, 11, 6D, 89, AB, 25, 93, 80, C7, 8B, B9, B4, E9, 29, 27, 46, 52, 3D, AD, CE, 67, 7E, D2, EA, F3, 73, 08, F1, 77, C4, 33, 2A, C2, EA, 70, 8B, 93, C1, D4, C5, A0, 67, 39, 15, 23, 47, E9, E1, 3C, 2B, AB, D6, 79, 91, 94, 5B, CA, 87, C5, 03, 13, 84, BC, 5E, F1, AD, A9, 1E, 95, BB, 42, 05, 4E, 7C, 7B, 20, 63, F3, A5, 6B, B6, 2E, B7, F9, FB, EE, 4E, 4B, D8, E4, 60, 53, 48, 17, C6, B2, 95, 8E, 17, AF, BF, 54, 61, D2, C4, E7, 8E, C5, FB, FF, DE, 37, D4, 37, B9, 63, D1... 
[+]

Entropy:

7.9865

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.2 MB (1,254,912 bytes)

The file xcleaner_full.exe has been discovered within the following program.

X-Cleaner Deluxe by http://www.xblock.com/

www.xblock.com

About 5% of users remove it

Scan xcleaner_full.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.