home

phBot.exe

phBot

Ryan Clouser

Publisher:
ProjectHax  (signed by Ryan Clouser)

Product:
phBot

Description:
phBot - Silkroad Online Bot

Version:
11.8.6.0

MD5:
ea81db66278cfc6165a731d6c1730d8c

SHA-1:
dc9c6508c10431603a13bc96ceba56f2742835aa

SHA-256:
5102ebbdc29f00df81c8dcb8e0ebf9590359fb0e0b3bc6b01435e4919f7bf578

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 2:25:45 AM UTC  (today)

File size:
18.2 MB (19,089,032 bytes)

Product version:
11.8.6.0

Copyright:
Copyright (C) 2015 ProjectHax

Original file name:
phBot.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Ryan Clouser

Authority:
StartCom Ltd.

Valid from:
11/8/2013 8:13:03 PM

Valid to:
11/9/2015 6:34:04 AM

Subject:
E=ryan@projecthax.com, CN=Ryan Clouser, L=Camp Hill, S=Pennsylvania, C=US, Description=GDbAxi2Z0A7Em5K7

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0BB8

File PE Metadata
Compilation timestamp:
1/28/2015 3:09:57 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:tBand9E9p+5f+uT+Qy2lDCjan5uNBamC/IbZYi1d/kd0ONsBSAC51wfN:tUOyX+QyMeY5uDs/Ibv/ki9J1

Entry address:
0x18F68D7

Entry point:
68, CA, A3, 9B, 70, C7, 04, 24, 78, 17, AD, 65, E9, 26, 1C, 21, 01, C5, 12, AE, DA, B6, 75, C4, 15, EA, 4A, 03, 07, 09, 25, 22, 6D, 46, D2, 8F, F6, B3, FB, AD, 0E, 2A, 21, 54, 44, D7, E4, 56, D3, CF, 8B, E7, 4B, DD, AE, 1C, 4C, F3, 6F, D8, A4, 85, D0, 52, CE, BB, D3, C1, FD, 61, 65, C0, D4, 2C, 65, 94, B2, 03, 71, 05, E2, 1A, FF, 05, 8B, 65, F3, 6F, 2F, 35, 63, B1, 96, 12, 18, 86, C4, 54, 59, 07, 45, 79, 07, 7F, C7, AB, 5F, 27, 16, 64, AF, 75, FB, 31, 0D, 57, 86, 02, C2, AC, 1E, A2, 1C, A2, 61, 2F, 09, 45...
 
[+]

Entropy:
7.9164  (probably packed)

Code size:
9.3 MB (9,722,880 bytes)

Scan phBot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.