home

cleanup_x64.exe

Cole Williams

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.
Publisher:
Cole Williams  (signed and verified)

MD5:
444d95a96b5a580266d4b730021d290d

SHA-1:
bf06ccd99fb9d32e6b846e5300b0d3de07b62674

SHA-256:
fdce25effc3cfea5a65cdb779c60cfcb66ffa16791cdd5da5487d89ddd1c486c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:41:30 AM UTC  (today)

File size:
205.1 KB (210,040 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\windows\syswow64\c2mp\cleanup_x64.exe

Digital Signature
Signed by:
Cole Williams

Authority:
COMODO CA Limited

Valid from:
10/13/2011 2:00:00 AM

Valid to:
10/13/2014 1:59:59 AM

Subject:
CN=Cole Williams, O=Cole Williams, STREET=156 Hainton Avenue, L=Grimsby, S=South Humberside, PostalCode=DN32 9LQ, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008610BD0612BFFEDFD1F58E92E221A01E

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:BQIURTXJ4moLJl2MW/JzIuckxBLw7LphAtCa6nMMU7cQPYTGJrCMCpN:Bs1+shJzIfmcphAv7iGJWMCpN

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file cleanup_x64.exe has been discovered within the following program.

Codecs for Windows 7 Pack 4.0.5  by Codecs for Windows 7 Pack
Publisher's description - “The Windows 7 Codec Pack is an easy way to install all main stream codecs to play movie and music files downloaded from the internet or ripped from original discs. Installation is made simple with an easy install option and the most functional setting are automatically applied.”
codecs4windows7.com
9% remove it
 
Powered by Should I Remove It?

Scan cleanup_x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.