» phoenixfd_demo_30300_max2016_vray_30_x64.exe
Overview
Analysis
File Details

phoenixfd_demo_30300_max2016_vray_30_x64.exe

Chaos Software Ltd.

File name:

Publisher:

Chaos Software Ltd. (signed and verified)

MD5:

33694de24ebff6c2f052e87b1a2a7b39

SHA-1:

8705d79998e8b9c6d6a6c002aca98971309f0dd4

SHA-256:

525627ca0280cfd5d8634fec062935471f159f6b3745e78dd25cfc0fec2669dd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 8:40:20 AM UTC (today)

File size:

28.1 MB (29,493,440 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\phoenixfd_demo_30300_max2016_vray_30_x64.exe

Digital Signature

Signed by:

Chaos Software Ltd.

Authority:

thawte, Inc.

Valid from:

4/20/2016 8:00:00 AM

Valid to:

5/23/2018 7:59:59 AM

Subject:

CN=Chaos Software Ltd., O=Chaos Software Ltd., L=Sofia, S=Sofia, C=BG

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

5F2C01F5AC76A4E204F481A52049C257

File PE Metadata

Compilation timestamp:

3/2/2017 7:42:49 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

10.0

Entry address:

0x3761C8

Entry point:

48, 83, EC, 28, E8, EF, 35, 01, 00, 48, 83, C4, 28, E9, 76, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 8B, C1, 49, 83, F8, 08, 72, 53, 0F, B6, D2, 49, B9, 01, 01, 01, 01, 01, 01, 01, 01, 49, 0F, AF, D1, 49, 83, F8, 40, 72, 1E, 48, F7, D9, 83, E1, 07, 74, 06, 4C, 2B, C1, 48, 89, 10, 48, 03, C8, 4D, 8B, C8, 49, 83, E0, 3F, 49, C1, E9, 06, 75, 39, 4D, 8B, C8, 49, 83, E0, 07, 49, C1, E9, 03, 74, 11, 66, 66, 66, 90, 90, 48, 89, 11, 48, 83, C1, 08, 49... 
[+]

Entropy:

7.8533 (probably packed)

Code size:

3.9 MB (4,088,320 bytes)

Scan phoenixfd_demo_30300_max2016_vray_30_x64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.