» proxy.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

proxy.exe

GhostSurf

Tenebril Incorporated

This is installed with GhostSurf Platinum.

File name:

proxy.exe

Publisher:

Tenebril Incorporated (signed and verified)

Product:

GhostSurf

Description:

GhostSurf proxy

Version:

0.10

MD5:

6779299bf66494ad6af8f69120a1d21a

SHA-1:

8bcc91a0da42482bfd674cfc5ea1cc8cc9e8b6f8

SHA-256:

2783f6a4eb2b358197e4d87131d1f3d04806773db69fcc792548dbe95521471f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 6:47:00 PM UTC (today)

File size:

89.4 KB (91,568 bytes)

Product version:

3.00

Original file name:

VehicleApp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\ghostsurf platinum\proxy.exe

Digital Signature

Signed by:

Tenebril Incorporated

Authority:

VeriSign, Inc.

Valid from:

9/24/2007 5:00:00 PM

Valid to:

10/1/2008 4:59:59 PM

Subject:

CN=Tenebril Incorporated, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Tenebril Incorporated, L=Boston, S=MA, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2F5F03B20C1606F29D918D8D032F4B0A

File PE Metadata

Compilation timestamp:

2/21/2004 2:12:28 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

1536:ZDZNffotGa0lpFIdpA+JhdLQfoXouJH/6Y2HckZal/pn:ZlNfwtJsH6ptZEoXpViY2HcICn

Entry address:

0x24A0

Entry point:

55, 8B, EC, 6A, FF, 68, 40, B1, F2, 60, 68, 04, 5A, F2, 60, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 80, B0, F2, 60, 33, D2, 8A, D4, 89, 15, D8, DC, F2, 60, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, D4, DC, F2, 60, C1, E1, 08, 03, CA, 89, 0D, D0, DC, F2, 60, C1, E8, 10, A3, CC, DC, F2, 60, 33, F6, 56, E8, FF, 09, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 18, 33, 00, 00, FF, 15, 7C, B0, F2, 60, A3, 14, F2, F2, 60, E8... 
[+]

Entropy:

5.5463

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

40 KB (40,960 bytes)

All Users Start Menu Item

Name:

Proxy.exe

The file proxy.exe has been discovered within the following program.

GhostSurf Platinum by Tenebril Inc.

www.tenebril.com/consumer/ghostsurf/index.php

26% remove it

Scan proxy.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.