home

phBot.exe

phBot

Ryan Clouser

Publisher:
ProjectHax  (signed by Ryan Clouser)

Product:
phBot

Description:
phBot - Silkroad Online Bot

Version:
11.8.1.0

MD5:
4c94b80d6ab5ba673327e2ce6f65fd73

SHA-1:
1551057167feb6e7c41f8ab0ca30410a120353bb

SHA-256:
b0028105e8a6c2737df224ce3285ab5dc1401972f8708a769c4d79f64eee10b5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:50:32 PM UTC  (today)

File size:
17.5 MB (18,329,728 bytes)

Product version:
11.8.1.0

Copyright:
Copyright (C) 2014 ProjectHax

Original file name:
phBot.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Ryan Clouser

Authority:
StartCom Ltd.

Valid from:
11/8/2013 4:13:03 AM

Valid to:
11/8/2015 2:34:04 PM

Subject:
E=ryan@projecthax.com, CN=Ryan Clouser, L=Camp Hill, S=Pennsylvania, C=US, Description=GDbAxi2Z0A7Em5K7

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0BB8

File PE Metadata
Compilation timestamp:
11/19/2014 3:33:07 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:2DGo5DyxW5dsI1DMo3JKe2/kJaAsmrWcg6TmK2+DC:aGo5DyxWETYJKeNaAfgWG/

Entry address:
0x22AD4B8

Entry point:
E9, C3, 66, 01, 00, 3A, 06, B5, 09, A6, 40, 87, D3, CB, 10, 66, 27, 26, AA, 6B, 4C, 8B, 36, 82, 4F, 8E, 62, 67, 52, 02, BB, 07, 4D, 90, 60, 6D, 79, C0, 2F, DD, 56, 8A, 59, C0, 3E, 2A, A0, E4, EF, DF, C6, 53, 49, E4, 8A, CD, 49, 77, 46, 63, D6, 14, AF, 49, F6, A8, 09, 79, D2, C0, 05, 7F, DA, 2E, 9F, B7, 78, 38, 8F, F7, 48, B2, 09, 1C, AF, 05, 33, 8E, E4, 63, DC, 5D, C9, DB, 52, BF, 84, 43, D3, 64, ED, 02, 76, 06, 3B, 86, DC, F2, 4D, 8D, 36, CA, 75, DE, 0E, 27, 12, 7F, B8, 41, F9, D8, 76, 03, 94, 59, FE, D5...
 
[+]

Entropy:
7.9295

Packer / compiler:
Xtreme-Protector v1.05

Code size:
9.2 MB (9,640,960 bytes)

Scan phBot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.