home

ChameleonExplorer.exe

Chameleon Explorer

Evgeni Shmakov

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Chameleon Explorer’.
Publisher:
NeoSoft Tools  (signed by Evgeni Shmakov)

Product:
Chameleon Explorer

Version:
3.0.0.505

MD5:
29e5b95aee021bdbb0ba92140f2f612c

SHA-1:
ee9f8ad323cd8051d0a93eb6168cb50c41da6bde

SHA-256:
4e205cf32780a552764a3637714b7fe301a000eaa1d03ef285eb3a722ad93bfa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:03:45 PM UTC  (today)

File size:
10.2 MB (10,652,264 bytes)

Product version:
2.0.0.0

Copyright:
2016 (c) NeoSoft Tools

Original file name:
ChameleonExplorer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\chameleon explorer\chameleonexplorer.exe

Digital Signature
Signed by:
Evgeni Shmakov

Authority:
StartCom Ltd.

Valid from:
12/23/2016 11:36:26 PM

Valid to:
12/23/2018 11:36:26 PM

Subject:
CN=Evgeni Shmakov, L=Yekaterinburg, S=Sverdlovsk Oblast, C=RU

Issuer:
CN=StartCom Class 2 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:
28C9F683FAA1CFBF158C338B59C90C4C

File PE Metadata
Compilation timestamp:
12/24/2016 1:18:00 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x70394C

Entry point:
55, 8B, EC, 83, C4, F0, B8, 10, E3, AE, 00, E8, 64, B5, 90, FF, E8, CB, 18, F2, FF, E8, 0E, 5E, 90, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6301

Developed / compiled with:
Microsoft Visual C++

Code size:
7 MB (7,347,200 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Chameleon Explorer

Command:
"C:\Program Files\chameleon explorer\chameleonexplorer.exe" \startup


Scan ChameleonExplorer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.