home

ExSync.exe

Exclaimer Outlook Settings Update Client (Loader)

Exclaimer Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Exclaimer Outlook Settings Update Client’.
Publisher:
Exclaimer Ltd  (signed and verified)

Product:
Exclaimer Outlook Settings Update Client (Loader)

Version:
1.0.20724.0

MD5:
0702ab1516dd6e99c975d55e6a3c4dd6

SHA-1:
3877ab275eb77ac8404c732e2985c2b8c371d7d0

SHA-256:
3e793e737eb5e6ec70e95f1744f8f6d95ba66b6d6bbb0cbba153bb0e0ab33f08

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:37:56 PM UTC  (today)

File size:
920.6 KB (942,736 bytes)

Product version:
1.0.20724.0

Copyright:
Copyright © 2001-2009 Exclaimer Ltd. All rights reserved.

Original file name:
ExSync.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\exclaimer applications\client\exsync.exe

Digital Signature
Signed by:
Exclaimer Ltd

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/12/2009 4:00:00 AM

Valid to:
3/10/2011 3:59:59 AM

Subject:
CN=Exclaimer Ltd, OU=SECURE APPLICATION DEVELOPMENT, O=Exclaimer Ltd, L=Farnborough, S=Hampshire, C=UK

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3C62E399DF8BB75E0AE764FE493E5451

File PE Metadata
Compilation timestamp:
7/24/2009 6:55:41 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:dFVqOmE0aNA3cLmwFpsFCy6Lo/3uRW+dCEo2QPjAm6nAF4yvKBivS2zM0bBivy2T:Pi38VLoPuDdeaAF4yoixMyiRM+

Entry address:
0xD95F

Entry point:
E8, D9, 46, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, F8, 9B, 42, 00, 75, 02, F3, C3, E9, 5B, 47, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, A5, 0C, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, D7, 4C, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 1E, 48, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 2D, 12, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73...
 
[+]

Entropy:
6.6290

Code size:
124.5 KB (127,488 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Exclaimer Outlook Settings Update Client

Command:
C:\Program Files\exclaimer applications\client\exsync.exe


Scan ExSync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.