» Manager.exe
Overview
Analysis
File Details

Manager.exe

Manager

Ryan Clouser

File name:

Manager.exe

Publisher:

ProjectHax (signed by Ryan Clouser)

Product:

Manager

Description:

phBot Manager

Version:

1.1.1.0

MD5:

8c12cdb3c0077a7a8def5ae26d733d67

SHA-1:

2cdd47a3e3579a704a572d970ca254d4ffb4e59b

SHA-256:

5bab7d89e94ddb8788e97818e111fbcc1434cac3ecd3ec50dc98345a3707d3f2

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/23/2024 5:16:29 PM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Malware.XPACK-LNR/Heur!1.5594

23.00.65.15628

File size:

14.3 MB (15,032,816 bytes)

Product version:

1.1.1.0

Original file name:

Manager.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Ryan Clouser

Authority:

StartCom Ltd.

Valid from:

11/8/2013 2:13:03 PM

Valid to:

11/9/2015 12:34:04 AM

Subject:

E=ryan@projecthax.com, CN=Ryan Clouser, L=Camp Hill, S=Pennsylvania, C=US, Description=GDbAxi2Z0A7Em5K7

Issuer:

CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:

0BB8

File PE Metadata

Compilation timestamp:

6/24/2015 1:02:27 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

393216:UGnuMVNqnGeTrHNM+/CEhBIoNA9iUJQbmXSGmhcJmCncfFLjZFP:nulnGortMtELIo9UObUSGpJmA81j/P

Entry address:

0x20FF95C

Entry point:

56, E8, 88, 7C, 59, FF, 0F, A3, E0, E8, 71, 2A, 5A, FF, 4B, 1A, F5, 04, EC, FE, 7E, B7, 60, 8E, 45, 3B, C4, B2, 62, 10, 15, 04, 12, C7, B6, 4B, 14, 22, A8, 15, 78, 8E, DA, 84, F9, 88, 0A, 1F, 63, 12, 23, F2, BE, BC, 17, D3, BE, F3, 72, A7, 9E, 39, 7D, 5B, 53, 6E, 62, 4D, 42, F9, 4F, 82, 90, C8, E6, 51, 42, 45, 5B, F8, FD, 18, E0, 5E, 8C, 8B, 12, A0, A9, B9, 9C, 88, 19, 95, C9, C8, FB, 6C, C1, 9E, E4, E9, 6B, B8, 4F, 6F, 57, F2, 41, FD, 7C, C7, 83, EF, 47, B6, 7F, 9A, B8, EE, B7, 11, 87, EA, 66, C1, 2B, 24... 
[+]

Entropy:

7.9056 (probably packed)

Code size:

7.3 MB (7,697,920 bytes)

Scan Manager.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.