home

cleanup_x64.exe.vir

Cole Williams

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.
Publisher:
Cole Williams  (signed and verified)

MD5:
8e1f3405fe6b729a9c4987e16798c794

SHA-1:
ff83c5e5dc3d6bcbe5321582a090c69b870fc956

SHA-256:
e996b630be1b43cd341750b1ce470dfe45cbf39e8c12194b6ae57004485d0527

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:44:32 AM UTC  (today)

File size:
47.7 KB (48,888 bytes)

Installer:
NSIS (Nullsoft Scriptable Install System)

Digital Signature
Signed by:
Cole Williams

Authority:
COMODO CA Limited

Valid from:
10/12/2011 2:00:00 AM

Valid to:
10/12/2014 1:59:59 AM

Subject:
CN=Cole Williams, O=Cole Williams, STREET=156 Hainton Avenue, L=Grimsby, S=South Humberside, PostalCode=DN32 9LQ, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
39B7C287C179FBD0F13185D66A9E71AB

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file cleanup_x64.exe.vir has been discovered within the following programs.

Codecs for Windows 7 Pack 4.0.5  by Codecs for Windows 7 Pack
Publisher's description - “The Windows 7 Codec Pack is an easy way to install all main stream codecs to play movie and music files downloaded from the internet or ripped from original discs. Installation is made simple with an easy install option and the most functional setting are automatically applied.”
codecs4windows7.com
9% remove it
VLC Codec Pack 2.0.5  by VLC Codec Pack
www.vlccodec.com
About 2% of users remove it
 
Powered by Should I Remove It?

Scan cleanup_x64.exe.vir - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.