» WinSysClean.EXE
Overview
Analysis
File Details
Programs (1)

WinSysClean.EXE

WinSysClean X6

Ultimate Systems

This file is installed with the program WinSysClean X6.

File name:

WinSysClean.EXE

Publisher:

Ultimate Systems, SRL (signed by Ultimate Systems)

Product:

WinSysClean® X6

Description:

Windows System Cleaner

Version:

16.1.0.866

MD5:

03c5863c742a6bc31eb5bfb668dd2b19

SHA-1:

4c82a031087eb3670f148335e508d4c8c148a4e0

SHA-256:

377fb9be6b3c8962485be0216188153797ff6113e89214462033f99c2de93c4a

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

11/23/2024 11:44:53 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

avast!

Win32:Kryptik-PFA [Trj]

2014.9-151125

File size:

10.8 MB (11,334,392 bytes)

Product version:

16.1.0.866

Trademarks:

WinSysClean® is a trademark of ULTIMATE SYSTEMS, SRL

Original file name:

WinSysClean.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\data\offline\51ebc292\7e21237\winsysclean.exe

Digital Signature

Signed by:

Ultimate Systems

Authority:

COMODO CA Limited

Valid from:

2/19/2014 1:00:00 AM

Valid to:

2/20/2015 12:59:59 AM

Subject:

CN=Ultimate Systems, OU=Ultimate Systems, O=Ultimate Systems, STREET="Intr. Ioan Vasii, Bl. C8, Ap.4", STREET=Timisoara, L=Timisoara, S=Timis, PostalCode=300001, C=RO

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F2C7BFCCCC587C799DF1B1F354A57AED

File PE Metadata

Compilation timestamp:

2/12/2015 6:10:40 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

98304:y51T/1sWldnlVa5XBS+JJCcC4ppndMgu2y5yZi+6861gqT93KBE/ZH31LO/ToJGU:G9qBTLIyD6VaqT93KB61LUTIGsw/8BN

Entry address:

0x21B54F

Entry point:

E8, 07, D5, 00, 00, E9, 7F, FE, FF, FF, FF, 35, 4C, 79, 92, 00, FF, 15, 60, D4, 80, 00, 85, C0, 74, 02, FF, D0, 6A, 01, 6A, 00, E8, 69, DA, 00, 00, 59, 59, E9, 81, DA, 00, 00, 56, 6A, 04, 6A, 20, E8, A0, DC, 00, 00, 59, 59, 8B, F0, 56, FF, 15, 24, D4, 80, 00, A3, 70, 95, 92, 00, A3, 6C, 95, 92, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 0C, 68, F8, E4, 8E, 00, E8, FA, 9C, 00, 00, 83, 65, E4, 00, E8, 77, A5, 00, 00, 83, 65, FC, 00, FF, 75, 08, E8, 23, 00, 00, 00, 59, 8B, F0, 89... 
[+]

Code size:

4 MB (4,243,456 bytes)

The file WinSysClean.EXE has been discovered within the following program.

WinSysClean X6 by Ultimate Systems, Inc.

This is a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

43% remove it

Scan WinSysClean.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.