» PhWmiPM.OCX
Overview
Analysis
File Details
Programs (1)

PhWmiPM.OCX

Proxy Host

Proxy Networks, Inc.

This is installed with PROXY Pro Host.

File name:

PhWmiPM.OCX

Publisher:

Proxy Networks, Inc. (signed and verified)

Product:

Proxy Host

Description:

Proxy Host: WMI Provider

Version:

7.0.5.1672

MD5:

0c73a6060ad1c5f787ba7c270dc0736c

SHA-1:

d11d9050539cc41ea2e005245d0953d433308762

SHA-256:

2c12be73dbba16335a807e38e16ece5e95bee5f1e12154bc8f13c5afa4398fda

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 8:02:47 AM UTC (today)

File size:

185.3 KB (189,776 bytes)

Product version:

7.0.5.1672

Trademarks:

PROXY is a trademark of Proxy Networks, Inc.

Original file name:

PhWmiPM.OCX

File type:

OLE control extension (Win32 OCX)

Language:

English (United States)

Common path:

C:\Program Files\proxy networks\proxy pro host\phwmipm.ocx

Digital Signature

Signed by:

Proxy Networks, Inc.

Authority:

VeriSign, Inc.

Valid from:

6/3/2010 7:00:00 PM

Valid to:

7/9/2012 6:59:59 PM

Subject:

CN="Proxy Networks, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Proxy Networks, Inc.", L=Boston, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

31206B537E668FC17EFF855B9E704B33

File PE Metadata

Compilation timestamp:

4/14/2012 3:37:55 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

3072:9bojfnmbUdgMOZfdm9pQg7i32U6BcfPBJhM9c/Nqvmv7rxli21BGE4veIcWdh16u:Oj+qCWjQgO3DP7hrZ7rJ1BGrvBT7dX

Entry address:

0x1AC82

Entry point:

6A, 0C, 68, 38, 1F, 02, 10, E8, FA, 00, 00, 00, 33, C0, 40, 89, 45, E4, 33, FF, 89, 7D, FC, 8B, 75, 0C, 3B, F7, 75, 0C, 39, 3D, 54, 8E, 02, 10, 0F, 84, AC, 00, 00, 00, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 9C, 7A, 02, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, E5, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 6A, FB, FF, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Entropy:

6.2287

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

116 KB (118,784 bytes)

The file PhWmiPM.OCX has been discovered within the following program.

PROXY Pro Host by Proxy Networks, Inc.

Publisher's description - “Desktop application that enables users to find, access, control and manage remote desktops through the Gateway Server. Workgroup solution for remote access and remote control of desktops and servers inside and outside a corporate network.”

www.proxynetworks.com

About 9% of users remove it

Scan PhWmiPM.OCX - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.