» Phoenix-FirestormOS-Releasex64-4-6-1-40478_Setup.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Phoenix-FirestormOS-Releasex64-4-6-1-40478_Setup.exe

Firestorm x64

The Phoenix Firestorm Project, Inc

This is the uninstaller utility registered in the Windows Control Panel for the program Firestorm x64 by Phoenix Firestorm Project Inc. This is installed with Firestorm x64.

File name:

Publisher:

Phoenix Firestorm Project Inc (signed by The Phoenix Firestorm Project, Inc)

Product:

Firestorm x64

Version:

4.6.40478

MD5:

4f684aac9261ad8210b3103427c9047a

SHA-1:

47aa91903fbcbaee0bba3fc030d2f20dc05fad3c

SHA-256:

7b0200c7ba7b29df1608b2f57df0839809e8b4afe302affb304448a350cd10eb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 11:24:42 PM UTC (a few moments ago)

File size:

789.6 KB (808,568 bytes)

Product version:

4.6.40478

Original file name:

Phoenix-FirestormOS-Releasex64-4-6-1-40478_Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\application data\package cache\{9cbe51c5-a36b-4708-96a0-a57005458010}\phoenix-firestormos-releasex64-4-6-1-40478_setup.exe

Digital Signature

Signed by:

The Phoenix Firestorm Project, Inc

Authority:

GlobalSign nv-sa

Valid from:

4/11/2013 4:04:44 PM

Valid to:

4/12/2014 4:04:44 PM

Subject:

E=jessica.lyon@phoenixviewer.com, CN="The Phoenix Firestorm Project, Inc", O="The Phoenix Firestorm Project, Inc", C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121E5DE5417CD8B95062CC482C56D5A1A7B

File PE Metadata

Compilation timestamp:

12/24/2012 9:43:11 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:yTyqt64j7HyCLNwpypXbrHOJ9o+lilM3oKosVJ0yW3Olq/jvU:yRtlXDRCypLbzhKLsp3H4

Entry address:

0x25D1C

Entry point:

E8, 1E, 1F, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, E8, 3E, 45, 00, 00, 74, 05, E9, 7E, 1F, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA... 
[+]

Entropy:

6.2392

Code size:

218 KB (223,232 bytes)

Program Uninstaller

Program name:

Firestorm x64

Display publisher:

Phoenix Firestorm Project Inc

Display version:

4.6.40478

Uninstall string:

"C:\ProgramData\Package Cache\{9cbe51c5-a36b-4708-96a0-a57005458010}\Phoenix-FirestormOS-Releasex64-4-6-1-40478_Setup.exe" /uninstall

The file Phoenix-FirestormOS-Releasex64-4-6-1-40478_Setup.exe has been discovered within the following program.

Firestorm x64 by Phoenix Firestorm Project Inc

www.firestormviewer.org

About 7% of users remove it

Scan Phoenix-FirestormOS-Releasex64-4-6-1-40478_Setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.