» SmsNotifier.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SmsNotifier.exe

SmsNotifier Module

ORANGE

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Start_SMSNotifier_{e34778cb-4457-4646-b83d-76c8241d15b9}’. This is installed with Business Everywhere.

File name:

SmsNotifier.exe

Publisher:

ORANGE (signed and verified)

Product:

SmsNotifier Module

Description:

Notifier Orange

Version:

5.1.3.10994

MD5:

b141fc944405619a84aa48edc9682f86

SHA-1:

e6c1f99baeea56aac0fce676e06cce826c834612

SHA-256:

d550a1723857dcb7c57820855f16db195f456b0c148e627ffd993fce7e95f1c2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

2/25/2025 5:19:13 PM UTC (today)

File size:

2.5 MB (2,629,168 bytes)

Product version:

BEW9513

Original file name:

SmsNotifier.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\orangebusinessservices\business everywhere\{e34778cb-4457-4646-b83d-76c8241d15b9}\smsnotifier.exe

Digital Signature

Signed by:

ORANGE

Authority:

thawte, Inc.

Valid from:

2/25/2016 4:00:00 PM

Valid to:

2/25/2018 3:59:59 PM

Subject:

CN=ORANGE, OU=FT/OLNC/OLPS/SOFT/RENNES/NEC, O=ORANGE, L=PARIS, S=Paris, C=FR

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

163C631C3DDF1F7276624F4040FD67AB

File PE Metadata

Compilation timestamp:

12/8/2016 5:14:39 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0xD8BA2

Entry point:

E8, B1, 04, 00, 00, E9, 37, FD, FF, FF, FF, 25, 54, D6, 5A, 00, FF, 25, 5C, D6, 5A, 00, FF, 25, 60, D6, 5A, 00, CC, CC, FF, 25, 70, D6, 5A, 00, FF, 25, 78, D6, 5A, 00, FF, 25, 7C, D6, 5A, 00, FF, 25, 88, D6, 5A, 00, FF, 25, 9C, D6, 5A, 00, FF, 25, A8, D6, 5A, 00, FF, 25, AC, D6, 5A, 00, FF, 25, B0, D6, 5A, 00, FF, 25, B4, D6, 5A, 00, FF, 25, B8, D6, 5A, 00, 6A, 10, 68, 38, 0C, 62, 00, E8, AC, 01, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55... 
[+]

Code size:

1.7 MB (1,751,040 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Start_SMSNotifier_{e34778cb-4457-4646-b83d-76c8241d15b9}

Command:

C:\Program Files\orangebusinessservices\business everywhere\{e34778cb-4457-4646-b83d-76c8241d15b9}\smsnotifier.exe

The file SmsNotifier.exe has been discovered within the following program.

Business Everywhere by OrangeBusinessServices

www.orange.co.uk

About 4% of users remove it

Scan SmsNotifier.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.