home

Phoenix.exe

ClientePhoenix

PHOENIX\LuisCalderon

Publisher:
Phoenix  (signed by PHOENIX\LuisCalderon)

Product:
ClientePhoenix

Version:
2.0.0.0

MD5:
8ee40e36959b0669a5a0cb2c33b28075

SHA-1:
95c21e4bff09fa89643b2badb34f129989c58cc4

SHA-256:
04b99673157e1a69fcdcde986509c0d49c62b4c10d3e51482b26fd50943a03a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/1/2024 3:51:22 AM UTC  (today)

File size:
9.3 MB (9,723,320 bytes)

Product version:
2.0.0.0

Copyright:
Copyright © 2009-2015

Original file name:
Phoenix.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\apps\2.0\eeyhgpcz.c5l\b1xjxw04.d07\phoe..tion_e2e7d04b5946409f_0001.0000_420a2efbb5807b36\phoenix.exe

Digital Signature
Signed by:
PHOENIX\LuisCalderon

Authority:
PHOENIX\LuisCalderon

Valid from:
8/7/2015 2:45:37 AM

Valid to:
8/6/2016 8:45:37 AM

Subject:
CN=PHOENIX\LuisCalderon

Issuer:
CN=PHOENIX\LuisCalderon

Serial number:
6C788FF9D9F22A864F7C8DEB4D695391

File PE Metadata
Compilation timestamp:
3/14/2016 12:57:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:HvVVLZzPbur5+emWLtMgMt0M5UgjM/M49MuiRu5OIWFEcOa:HNVLZOr5+emW62a

Entry address:
0x8EC5DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 96, FB, E6, 56, 00, 00, 00, 00, 02, 00, 00, 00, 1C, 01, 00, 00, 1C, E0, 8E, 00, 1C, AA, 8E, 00, 52, 53, 44, 53, A5, CB, 70, E6, B8, 34, D3, 46, 8A, B8, 7A, 7E, 5B, 7F, 6D, 73, 01, 00, 00, 00, 43, 3A, 5C, 53, 69, 73, 74, 65, 6D, 61, 73, 5C, 50, 68, 6F, 65, 6E, 69, 78, 5C, 49, 6E, 74, 65, 72, 66, 61, 7A, 5C, 6F, 62, 6A, 5C, 44, 65, 62, 75, 67, 5C, 50, 68, 6F...
 
[+]

Entropy:
6.2895

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8.9 MB (9,348,608 bytes)

Scan Phoenix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.