inFlowLogsUploader.exe

inFlow Logs Uploader

Archon Systems Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from inflowinventory.cachefly.net.
Publisher:
Archon Systems Inc.  (signed and verified)

Product:
inFlow Logs Uploader

Version:
2.0.0.0

MD5:
7300e53e4eba4f72f00f1f1a4334c11d

SHA-1:
07ac2b58e18c15c194686e3cb4b2114d134bfdd6

SHA-256:
cf71ae9f7c0d20c07d11f846ff0ca2829ff74b6332cd82bf69222f149267491a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/20/2018 12:09:57 PM UTC  (today)

File size:
821.1 KB (840,792 bytes)

Product version:
2.0.0.0

Copyright:
Copyright © 2015

Original file name:
inFlowLogsUploader.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Authority:
DigiCert Inc

Valid from:
1/20/2016 7:00:00 PM

Valid to:
1/25/2019 7:00:00 AM

Subject:
CN=Archon Systems Inc., O=Archon Systems Inc., L=Toronto, S=Ontario, C=CA

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
089ABC43417D1EE47DA7B893A2FBBA9B

File PE Metadata
Compilation timestamp:
1/29/2016 5:20:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:mrZEB3XsnpNZ05FYp08wLccVUhplV75GuS6:m1S3XsnpN+vYq8kccVeL0q

Entry address:
0xC193E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.7914

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
766.5 KB (784,896 bytes)

The file inFlowLogsUploader.exe has been seen being distributed by the following URL.

Scan inFlowLogsUploader.exe - Powered by Reason Core Security