» x-fonter.exe
Overview
Analysis
File Details

x-fonter.exe

X-Fonter

Peter Boey

File name:

x-fonter.exe

Publisher:

Blacksun Software (signed by Peter Boey)

Product:

X-Fonter

Version:

8.0.0.53

MD5:

3bb15aa9b73dff8faf8845af2fba0f72

SHA-1:

1d9cac2e1df09a1fdc8eb9f62f9056cd5354ecfe

SHA-256:

d3df4e48c79572dea0f6e283a483e5f320d55399a65f26250850149716dec4ec

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/8/2024 6:33:23 AM UTC (today)

File size:

3.2 MB (3,373,736 bytes)

Product version:

8.0.0

Blacksun Software 2013

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\x-fonter\x-fonter.exe

Digital Signature

Signed by:

Peter Boey

Authority:

COMODO CA Limited

Valid from:

4/4/2013 2:00:00 AM

Valid to:

4/5/2015 1:59:59 AM

Subject:

CN=Peter Boey, O=Peter Boey, STREET=Bergbeemden 40, L=Turnhout, S=Antwerpen, PostalCode=2300, C=BE

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00DCE062B18295F54484ECF8C159A7C9BA

File PE Metadata

Compilation timestamp:

12/10/2013 3:10:12 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:oVB3XQToBQ5A++kTu1s6EEcjBn7LFXrQjG0PhSiAlgzBD8YIbvtUN/3ySCCY2qGH:w3gUAA++OcNcVFX0jfwRlglg3G3ySCWB

Entry address:

0x1000

Entry point:

68, 01, 10, 14, 01, E8, 01, 00, 00, 00, C3, C3, B2, AF, 9A, 92, B8, 98, B4, 31, 15, 12, DC, DA, 02, 82, 91, 91, 2C, 23, 52, 18, 46, 4B, 14, 43, 7C, B0, A4, FA, 42, 80, 8F, 3F, 80, CA, 45, D1, E1, 82, E4, 98, FC, 37, C0, 9C, AA, E3, 30, F7, 16, 9A, 43, 84, FA, B8, B6, 72, 6A, FC, 56, 1E, 53, 4C, E3, 3F, F0, 28, E1, F9, 49, E9, 7D, E4, 49, 2D, 74, 4A, AE, 86, FA, 54, 41, 89, 93, 7A, 46, 12, BB, F8, 53, 18, 8B, 2E, 17, A4, 21, 0B, 24, 71, 36, B9, 5E, 9F, BA, 8E, D6, 6B, BB, 3E, DB, D9, C1, AB, FB, E0, DB, AD... 
[+]

Entropy:

7.9872

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

8.1 MB (8,473,088 bytes)

Scan x-fonter.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.