home

photozoom_classic_6_setup.exe

PhotoZoom Classic 6 Setup

BenVista Ltd.

This is a setup and installation application. The file has been seen being downloaded from www.benvista.com.
Publisher:
BenVista Ltd.

Product:
PhotoZoom Classic 6 Setup

Description:
PhotoZoom Classic 6 Setup Application

Version:
6.0.8

MD5:
5241fd425d867a3f7086f19bfe429fdf

SHA-1:
2ca4888823e896fdedb921fe583fd79261253736

SHA-256:
564172bc3b065e8fe2dcde7e240badd91b8750bed5eb9c5f370f7b93db328cd4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:35:40 AM UTC  (today)

File size:
7.4 MB (7,807,952 bytes)

Product version:
6.0.8

Copyright:
Copyright (C) BenVista Ltd. 2014-2015

Original file name:
PhotoZoom Classic 6 Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\photozoom_classic_6_setup.exe

File PE Metadata
Compilation timestamp:
12/1/2015 1:23:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:I9XoP9qV86aqCaoOvm9W/bw4sWFiFF9V1MnYkhaCIGh9IWE90Bt8X:I9XYYMqCeIW/bw1bF9vMYCLw2u

Entry address:
0x9755D0

Entry point:
0F, BE, DD, 8D, 0D, D8, BB, B4, F5, B7, AB, 85, DB, F3, 8B, EA, 89, D8, 81, F1, E4, 63, BB, A1, 1C, 85, 0F, AF, FE, FF, C7, E8, 00, 00, 00, 00, B8, 00, 00, 00, 00, 85, EF, C6, C5, 1D, 4A, BD, 0D, 79, 83, 0B, 89, ED, 05, 8B, FF, FF, FF, B2, BE, 43, 87, DA, 05, 76, 00, 00, 00, 43, 4F, 41, FF, C1, 3D, B0, 00, 00, 00, 0F, 82, D4, FF, FF, FF, 58, 0F, AF, D1, 89, FF, 0F, AF, F2, BF, F0, 98, 48, 1F, 2A, D6, 10, F3, 69, EB, 25, 7D, 74, 21, 05, 2F, 4E, 00, 00, 81, DE, 0A, DD, E2, 6D, 05, 35, 0C, 00, 00, EB, 02, FF...
 
[+]

Entropy:
7.8146  (probably packed)

Code size:
7.4 MB (7,712,768 bytes)

The file photozoom_classic_6_setup.exe has been seen being distributed by the following URL.

http://www.benvista.com/photozoomclassic6/.../win

Scan photozoom_classic_6_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.