» phoenixviewer.exe
Overview
Analysis
File Details
Behaviors (1)

phoenixviewer.exe

The Phoenix Viewer Project, Inc

It runs as a scheduled task under the Windows Task Scheduler.

File name:

phoenixviewer.exe

Publisher:

Phoenix Viewer (signed by The Phoenix Viewer Project, Inc)

Product:

Phoenix Viewer

Version:

1.6.0.1600

MD5:

243ba0f5a563d82843f5af783396dd15

SHA-1:

63dd306c38a9fc2d14efe4f9778c4d7b6fa13d82

SHA-256:

d1610bece1ade0cf9f783f8e9ce959886f41986aa3e8f4b8e815b96d22758e0b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 12:55:52 PM UTC (today)

File size:

23 MB (24,168,304 bytes)

Product version:

1.6.0.1600

Original file name:

Phoenix Viewer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\phoenix viewer\phoenixviewer.exe

Digital Signature

Signed by:

The Phoenix Viewer Project, Inc

Authority:

GlobalSign nv-sa

Valid from:

4/11/2011 9:06:26 PM

Valid to:

4/11/2012 9:06:11 PM

Subject:

CN="The Phoenix Viewer Project, Inc", O="The Phoenix Viewer Project, Inc", L=Fairmont, S=Minnesota, C=US

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

0100000000012F4601C51B

File PE Metadata

Compilation timestamp:

12/13/2011 7:24:37 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

393216:ZjoYSKciqT3lrG1A8Kpd6pLqgweeKky564Y3YUJlRJ2EkeCpM35GPCTvOpSJ8oqz:ZkYSKdqT3CA8Kpd6pLqgweeKky564Y3O

Entry address:

0xDBBAE5

Entry point:

E8, 8E, 09, 00, 00, E9, DD, FC, FF, FF, CC, FF, 25, 34, 39, 55, 01, FF, 25, 38, 39, 55, 01, FF, 25, 3C, 39, 55, 01, FF, 25, 40, 39, 55, 01, FF, 25, 44, 39, 55, 01, FF, 25, 48, 39, 55, 01, FF, 25, 4C, 39, 55, 01, FF, 25, 50, 39, 55, 01, FF, 25, 54, 39, 55, 01, FF, 25, 58, 39, 55, 01, FF, 25, AC, 3A, 55, 01, FF, 25, A8, 3A, 55, 01, FF, 25, A4, 3A, 55, 01, FF, 25, A0, 3A, 55, 01, FF, 25, 9C, 3A, 55, 01, FF, 25, 98, 3A, 55, 01, FF, 25, 94, 3A, 55, 01, FF, 25, 90, 3A, 55, 01, FF, 25, 8C, 3A, 55, 01, FF, 25, 88... 
[+]

Code size:

17.3 MB (18,161,664 bytes)

Scheduled Task

Task name:

{EF291B6B-3F9E-479E-83FF-0D9E43C13186}

Trigger:

Registration (Runs on registration)

Scan phoenixviewer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.