home

smart bill gestiune magazin.exe

Intelligent IT

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SmartBillSys’.
Publisher:
Intelligent IT  (signed and verified)

MD5:
d312c0523c6c81d4d55cb8691a423ad4

SHA-1:
2d2e2bdb1bf5f7c6d0fef39b806c83a0cf41cc47

SHA-256:
f572cafb37ddeba067491246a9b3bc6a398262ac5fd056e283185e1f2f6cfa43

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 7:55:33 PM UTC  (today)

File size:
4.2 MB (4,363,656 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Intelligent IT

Authority:
thawte, Inc.

Valid from:
6/3/2015 3:00:00 AM

Valid to:
2/26/2016 1:59:59 AM

Subject:
CN=Intelligent IT, O=Intelligent IT, L=Sibiu, S=Sibiu, C=RO

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5E0E3E84806B80570796EA85A07DB1DB

File PE Metadata
Compilation timestamp:
1/6/2016 4:58:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
98304:Hzt0UVCg2XDI4uFivCBD4GkSkVwsyInb/lIk+6sF:HzSKCPU4uFivCW4syIb/lx+XF

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, B7, 3F, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Packer / compiler:
MingWin32

Code size:
18 KB (18,432 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SmartBillSys

Command:
"C:\smart bill gestiune magazin\smart bill gestiune magazin.exe" \s


Scan smart bill gestiune magazin.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.