home

feDozarCFDiLite.exe

feDozarCFDiLite

lapdozar6470b\eugeniod

Publisher:
SWDozar  (signed by lapdozar6470b\eugeniod)

Product:
feDozarCFDiLite

Version:
1.0.0.0

MD5:
ffd9a8d95b981f27b10609d6c4bb917c

SHA-1:
733ccc22e8461a8840daae30286fe5039d73a6da

SHA-256:
80509cdb555e3c4362eb29e54e89991eea5cc8d5b8bf2435944911a5035cbed3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 3:47:16 PM UTC  (today)

File size:
1.5 MB (1,587,136 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © DOZAR LAB SERVICES SC 2013

Trademarks:
SWDozar

Original file name:
feDozarCFDiLite.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\apps\2.0\h14g6mew.k8m\p0hd09cx.avm\fedo..tion_508c1f55404bc13d_0002.0000_6718e05cc58cec35\fedozarcfdilite.exe

Digital Signature
Signed by:
lapdozar6470b\eugeniod

Authority:
lapdozar6470b\eugeniod

Valid from:
1/31/2016 1:01:25 PM

Valid to:
1/30/2017 7:01:25 PM

Subject:
CN=lapdozar6470b\eugeniod

Issuer:
CN=lapdozar6470b\eugeniod

Serial number:
7BC7D876DCD4749A4797DEFAB844A7A5

File PE Metadata
Compilation timestamp:
3/11/2016 10:31:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
80.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:MCfoNmug1gBA3qQy17wmeYPAnKwEqCH8aF1dQ:MNrjBDePKwEqCTF1dQ

Entry address:
0x17723E

Entry point:
FF, 25, 00, 20, 40, 00, 01, 01, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8624

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.5 MB (1,528,832 bytes)

Scan feDozarCFDiLite.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.