home

XStreamVPN.exe

My Privacy Tools, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘XStreamVPN’.
Publisher:
XStreamVPN  (signed by My Privacy Tools, Inc.)

Product:
XStreamVPN

Version:
6.00.0508

MD5:
ae055d4c5145986eb65da1b01afb0d7b

SHA-1:
a19e74bc7bd849bda5b6c7bbfa0dcca66c7d2439

SHA-256:
a9cb58e2b3e739b26481dfa9edbea55caf5ac7d7b86698fecdca93cfa338bf2c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 3:28:12 PM UTC  (today)

File size:
356.5 KB (365,096 bytes)

Product version:
6.00.0508

Copyright:
XStreamVPN

Original file name:
XStreamVPN.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xstreamvpn\xstreamvpn.exe

Digital Signature
Signed by:
My Privacy Tools, Inc.

Authority:
COMODO CA Limited

Valid from:
4/3/2016 8:00:00 PM

Valid to:
4/4/2018 7:59:59 PM

Subject:
CN="My Privacy Tools, Inc.", O="My Privacy Tools, Inc.", STREET=7770 Regents Rd, L=San Diego, S=CA, PostalCode=92122, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00859403BB5008B650CA88F531C406730F

File PE Metadata
Compilation timestamp:
1/6/2017 4:12:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x136C

Entry point:
B8, 88, F3, 4F, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, E8, AE, D2, CD, F6, 83, 80, 93, F8, 20, B4, 7C, F4, 2E, 0F, 3E, 95, 3F, 77, 77, DB, 66, 5D, 57, B6, 57, 1A, C1, 51, D0, 5E, 23, 36, C6, 03, 7B, 96, 00, 57, A0, E0, 78, 5E, 46, D6, 30, 51, EC, EB, C8, 2A, 97, CB, 20, 71, A6, 63, 5E, 9C, A4, 4B, CE, 9B, 36, D9, 09, 6C, 69, 9C, 53, AB, EB, 9C, FA, 7D, D7, FE, 1A, 15, 5A, 28, 9A, 9C, 8B, 84, 47, B8, FA, 30, 07, 1B, 30, CA...
 
[+]

Entropy:
7.4058

Packer / compiler:
PECompact v2

Code size:
748 KB (765,952 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
XStreamVPN

Command:
"C:\Program Files\xstreamvpn\xstreamvpn.exe" \startup


Scan XStreamVPN.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.