home

phantomjs.exe

PhantomJS

This is a setup program which is used to install the application. The file has been seen being downloaded from public.fillup.pl.
Publisher:
PhantomJS

Product:
PhantomJS

Description:
PhantomJS is a headless WebKit with JavaScript API

Version:
2.1.1

MD5:
339f74c735e683502c43512a508e53d6

SHA-1:
7e69c335e70fe5a818f8f8f4e2374bf8943375d4

SHA-256:
1cf9b2aa732bd0c65a83c55d96ba98c4ed462b93720d7fd8c0bcc53683bfcffb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 8:35:45 AM UTC  (today)

File size:
17.7 MB (18,587,648 bytes)

Product version:
2.1.1

Copyright:
Copyright (C) Ariya Hidayat 2012

Original file name:
phantomjs.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\npm\node_modules\phantomjs\lib\phantom\bin\phantomjs.exe

File PE Metadata
Compilation timestamp:
1/24/2016 11:21:55 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
393216:DF4TFZKKYBOnarkVW8JIOcymQOUJYXtgnRGTiAdDdnba6kg:DFE+5vrkVWhOc57d6Ondhba6

Entry address:
0x30A4570

Entry point:
60, BE, 00, C0, 2E, 02, 8D, BE, 00, 50, 11, FE, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.9337

Packer / compiler:
UPX 2.90LZMA

Code size:
17.7 MB (18,583,552 bytes)

The file phantomjs.exe has been discovered within the following program.

Selenium Basic  by Florent BREHERET
github.com/florentbr/SeleniumBasic
About 2% of users remove it
 
Powered by Should I Remove It?

The file phantomjs.exe has been seen being distributed by the following URL.

http://public.fillup.pl/online/.../phantomjs_2_1_1.exe

Scan phantomjs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.