» phoenixfd_demo_30300_max2017_vray_30_x64.exe
Overview
Analysis
File Details

phoenixfd_demo_30300_max2017_vray_30_x64.exe

Chaos Software Ltd.

File name:

Publisher:

Chaos Software Ltd. (signed and verified)

MD5:

9f387d812b0bf7535e4901d4e0647113

SHA-1:

89a88e46e6de8f99f6948bd1c89bb4ee2a9f7570

SHA-256:

83db10ed113d26740fd3ceef80021b81e4e745cbf908c5f715fe5557dd63cfd9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 8:21:35 AM UTC (today)

File size:

30 MB (31,489,776 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\users\{user}\downloads\phoenixfd_demo_30300_max2017_vray_30_x64.exe

Digital Signature

Signed by:

Chaos Software Ltd.

Authority:

thawte, Inc.

Valid from:

4/20/2016 3:00:00 AM

Valid to:

5/23/2018 2:59:59 AM

Subject:

CN=Chaos Software Ltd., O=Chaos Software Ltd., L=Sofia, S=Sofia, C=BG

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

5F2C01F5AC76A4E204F481A52049C257

File PE Metadata

Compilation timestamp:

3/1/2017 11:46:45 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

10.0

Entry address:

0x3761C8

Entry point:

48, 83, EC, 28, E8, EF, 35, 01, 00, 48, 83, C4, 28, E9, 76, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 8B, C1, 49, 83, F8, 08, 72, 53, 0F, B6, D2, 49, B9, 01, 01, 01, 01, 01, 01, 01, 01, 49, 0F, AF, D1, 49, 83, F8, 40, 72, 1E, 48, F7, D9, 83, E1, 07, 74, 06, 4C, 2B, C1, 48, 89, 10, 48, 03, C8, 4D, 8B, C8, 49, 83, E0, 3F, 49, C1, E9, 06, 75, 39, 4D, 8B, C8, 49, 83, E0, 07, 49, C1, E9, 03, 74, 11, 66, 66, 66, 90, 90, 48, 89, 11, 48, 83, C1, 08, 49... 
[+]

Entropy:

7.8668 (probably packed)

Code size:

3.9 MB (4,088,320 bytes)

Scan phoenixfd_demo_30300_max2017_vray_30_x64.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.