home

efinsmartportal.exe

eFinSmartPort

Online Asset Co.,Ltd

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from www.efinancethai.com.
Publisher:
Online Asset Co.,Ltd

Product:
eFinSmartPort

Description:
Setup Launcher

Version:
4.1.0

MD5:
6491a6b181c5a2e9fbd0d2f7008adaf8

SHA-1:
f77b18c94aa3fd0303715835a0064ee6fbb3ddc3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:38:22 PM UTC  (today)

File size:
9.6 MB (10,082,763 bytes)

Product version:
4.1.

Copyright:
Copyright (C) 2007 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
Thai

Common path:
C:\Documents and Settings\{user}\My documents\downloads\efinsmartportal.exe

File PE Metadata
Compilation timestamp:
4/19/2007 8:03:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:H1fexIEj1Mo9dpPY+mCNBSHimVRu94YuWiLzccP+NOfa5f7KT++KUcE:H0Z1h9r7mCNBSHima9coSm5+Sla

Entry address:
0x2996C

Entry point:
F3, F7, C5, AF, 73, 15, 2F, 80, C3, 2F, 78, 01, F3, 0F, AF, FD, 2B, D8, C7, C3, A5, 46, 75, BA, 0F, AF, EE, 22, F8, 03, C1, 80, E3, 18, 4F, 73, 07, 0F, AF, DB, 23, F1, 85, FF, F7, C5, FA, DF, A1, D6, C6, C0, 56, 89, F7, 0A, D0, 8B, D0, 69, ED, D9, 4F, A6, 98, 69, EB, 85, 7C, 99, D7, 69, ED, 7C, D0, 79, 37, 6A, 00, 5E, B9, CD, 27, 58, B8, 8D, 15, 51, E9, FC, A0, 81, EE, 56, EE, FF, FF, 85, F9, 81, EE, 39, 04, 00, 00, FF, CB, 34, 4D, 85, D8, 75, 07, 87, D0, 0F, BF, C7, 84, CB, 8A, C7, 81, EE, D4, 00, 00, 00...
 
[+]

Entropy:
7.9881  (probably packed)

Code size:
212 KB (217,088 bytes)

The file efinsmartportal.exe has been seen being distributed by the following URL.

http://www.efinancethai.com/smartportal/Versions/4_1_0_5/.../eFinSmartPortal.exe

Scan efinsmartportal.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.