» DzPhpEd.exe
Overview
Analysis
File Details

DzPhpEd.exe

DzSoft PHP Editor

DzSoft Ltd

File name:

DzPhpEd.exe

Publisher:

DzSoft Ltd (signed and verified)

Product:

DzSoft PHP Editor

Version:

4.2.7.4

MD5:

b11b8168d1d65919a8e819c060659942

SHA-1:

f724a705801f4cf8cf5c68ce8fbb26ca164f09c4

SHA-256:

8a0f40b61dd91b4b2fa30e503399b3ed1ef49c2ed0bd4d33f2aa1259bd74b08f

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/10/2024 2:19:51 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/18155

File size:

2.5 MB (2,597,264 bytes)

Product version:

4.2.7

Original file name:

DzPhpEd.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\dzsoft\php editor\dzphped.exe

Digital Signature

Signed by:

DzSoft Ltd

Authority:

The USERTRUST Network

Valid from:

5/11/2011 5:00:00 PM

Valid to:

5/11/2014 4:59:59 PM

Subject:

CN=DzSoft Ltd, O=DzSoft Ltd, STREET="Gogolya, 12/21, k.9", L=Kremenchuk, S=Poltavska oblast, PostalCode=39605, C=UA

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0085D243616CDC4EF591F7541D58CA39AE

File PE Metadata

Compilation timestamp:

12/20/2011 5:14:51 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:wPbjb5D4stV0PleoylLCca0AqZKRccDvCDM9tKdhhu0i:wjj1Z+0QKAqZKRccDvCDM9tKdhhQ

Entry address:

0x1000

Entry point:

68, 01, C0, 8F, 00, E8, 01, 00, 00, 00, C3, C3, 2A, 5E, 98, EC, 25, 10, BE, AE, BD, C0, B5, DF, 94, B9, AE, 64, 25, F4, 08, 37, 10, 19, AC, 33, CF, 40, F0, 53, 1C, 39, 52, C2, BA, 93, 57, E1, 64, 45, A3, 16, A4, 27, BA, 28, B1, D8, 25, 51, 04, 01, D8, A9, 35, BB, D4, 9C, 85, 45, FC, F1, 3F, D9, F5, 84, 71, DD, 8D, 6C, 1D, BA, 09, B9, AE, DA, 66, D4, D7, ED, 8C, 42, AF, 44, 0A, FD, 7B, A6, A9, 30, 7F, 17, FB, A0, 57, AD, 08, 6D, 5B, 8A, 33, EC, 07, D1, 51, 5E, 66, 41, F4, 09, 4A, 04, AA, A5, FB, A0, 68, 7F... 
[+]

Entropy:

7.0076

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

2.8 MB (2,944,000 bytes)

Scan DzPhpEd.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.