home

phrozen safe usb.exe

LESUEUR JEAN-PIERRE VINCENT

Publisher:
PhrozenSoft  (signed by LESUEUR JEAN-PIERRE VINCENT)

Version:
1.0.0.0

MD5:
19fd1892ebff2e7d89f05e1879fa2e42

SHA-1:
ece99e2534a307d14c239b0127445e303cb4395c

SHA-256:
0471f063db660af49c40432d9764ee035f1b1c879df91874d2a1728a4c2fa7fa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 3:03:52 AM UTC  (today)

File size:
3.5 MB (3,632,648 bytes)

Product version:
1.0.0.0

Copyright:
2012

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\phrozen safe usb.exe

Digital Signature
Signed by:
LESUEUR JEAN-PIERRE VINCENT

Authority:
COMODO CA Limited

Valid from:
7/18/2013 7:00:00 AM

Valid to:
7/19/2014 6:59:59 AM

Subject:
CN=LESUEUR JEAN-PIERRE VINCENT, O=LESUEUR JEAN-PIERRE VINCENT, STREET=12 Bis rue de la muette, L=Maisons Laffitte, S=Yvelines, PostalCode=78600, C=FR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B1A4D9D55C68FA3452E8826B8894ABDC

File PE Metadata
Compilation timestamp:
10/19/2013 6:11:06 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:W02ENS7O/hmWNRFsWUmRBbv2AiRsJkWZBlMaA4ITtZxlVDXEbW+8x7sHIW:WN+hXXlMangl2bv6XW

Entry address:
0x2323A4

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 3C, 8D, 62, 00, E8, 5B, 88, DD, FF, 8B, 1D, 1C, BE, 63, 00, A1, E0, B9, 63, 00, C6, 00, 01, B2, 01, B8, 98, 24, 63, 00, E8, C1, B7, EB, FF, 6A, 00, E8, 2A, A1, DD, FF, 68, BC, 24, 63, 00, 6A, 00, 6A, 00, E8, 20, 9E, DD, FF, E8, 13, 9F, DD, FF, 3D, B7, 00, 00, 00, 75, 1C, 6A, 10, 68, DC, 24, 63, 00, 68, 00, 25, 63, 00, 8B, 03, 8B, 80, 70, 01, 00, 00, 50, E8, 56, AA, DD, FF, EB, 79, 8B, 03, E8, ED, 31, EB, FF, 8B, 03, BA, DC, 25, 63, 00, E8, 19, 2C, EB, FF, 8B, 0D, 30, BC, 63...
 
[+]

Entropy:
6.5540

Developed / compiled with:
Microsoft Visual C++

Code size:
2.2 MB (2,297,344 bytes)

Scan phrozen safe usb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.