» mr_faktury_pro.exe
Overview
Analysis
File Details
Behaviors (1)

mr_faktury_pro.exe

MR_FAKTURY_PRO

MR_FLASH Mirosław Rogula

It runs as a scheduled task under the Windows Task Scheduler.

File name:

mr_faktury_pro.exe

Publisher:

MR_FLASH Miroslaw Rogula (signed by MR_FLASH Mirosław Rogula)

Product:

MR_FAKTURY_PRO

Version:

3.0.1.0

MD5:

5a0a96b37fa639ef35599f868fdd7f50

SHA-1:

adbb3d50c56c44ed7e272b76121c3e528ce7476b

SHA-256:

af81e93e4fd833505270081cd31a01a5ae756bc5adff1e2352dfac154f17c858

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/28/2024 10:39:06 AM UTC (today)

File size:

23.7 MB (24,854,288 bytes)

Product version:

3.0.1

MR_FLASH

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

MR_FLASH Mirosław Rogula

Authority:

Unizeto Technologies S.A.

Valid from:

1/26/2016 8:09:40 AM

Valid to:

6/19/2016 9:09:40 AM

Subject:

E=poczta@faktury-ok.pl, CN=Mirosław ROGULA, O=MR_FLASH Mirosław Rogula, C=PL

Issuer:

CN=Certum Code Signing CA SHA2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:

5CAC4434E201E70F2734E22717DF3896

File PE Metadata

Compilation timestamp:

3/8/2016 10:25:42 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:A0DivoMxqJaknGH0uOsCaMKVA32NHOqTxbk64dKyVTdxrgd9Xf4YybaYaFcTzG2Z:YXrk49yzeTc

Entry address:

0x1295624

Entry point:

55, 8B, EC, 83, C4, F0, B8, 64, 6E, 64, 01, E8, 10, BF, D7, FE, A1, F0, 77, 74, 01, 8B, 00, E8, 58, D1, FD, FE, A1, F0, 77, 74, 01, 8B, 00, BA, 54, 5A, 69, 01, E8, 83, CB, FD, FE, A1, F0, 77, 74, 01, 8B, 00, B2, 01, E8, 59, EE, FD, FE, 8B, 0D, 80, 67, 74, 01, A1, F0, 77, 74, 01, 8B, 00, 8B, 15, 60, 6F, 62, 01, E8, 39, D1, FD, FE, 8B, 0D, 40, 81, 74, 01, A1, F0, 77, 74, 01, 8B, 00, 8B, 15, D0, AD, E9, 00, E8, 21, D1, FD, FE, 8B, 0D, 00, 80, 74, 01, A1, F0, 77, 74, 01, 8B, 00, 8B, 15, 38, 29, 26, 01, E8, 09... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

18.6 MB (19,481,088 bytes)

Scheduled Task

Task name:

{1812C7FF-B763-4B59-9E0B-3A8C0B73F69F}

Trigger:

Registration (Runs on registration)

Scan mr_faktury_pro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.