» uninstall_smartmanager.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall_smartmanager.exe

Now Media Corp.

The application uninstall_smartmanager.exe by Now Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program Windows Smart Pack by Windows Smart Pack. This file is typically installed with the program Windows Smart Pack by Now Media Corp..

File name:

Publisher:

Now Media Corp. (signed and verified)

MD5:

a7a74d3d5904bcab53b6c9e5b2020ec2

SHA-1:

6f460a9165e8bfb208222eaf1cc66bfd6a8af640

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/27/2024 1:11:05 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.10.31.2

File size:

1 MB (1,077,648 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\smartmanager\uninstall_smartmanager.exe

Digital Signature

Signed by:

Now Media Corp.

Authority:

Thawte, Inc.

Valid from:

3/24/2012 9:00:00 AM

Valid to:

4/24/2013 8:59:59 AM

Subject:

CN=Now Media Corp., OU=EC Team, O=Now Media Corp., L=Uijeongbu-si, S=Gyeonggi-do, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

3ACFBF44AA68CA08512B1BA9C041D893

File PE Metadata

Compilation timestamp:

6/20/1992 7:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:fYGrg0yF8Ycd16RWJ3ESOYehlxUdgcdzK:fYzcd13gH+dK

Entry address:

0xE333C

Entry point:

55, 8B, EC, 83, C4, E8, 53, 33, C0, 89, 45, EC, 89, 45, E8, B8, 14, 2E, 4E, 00, E8, AF, 37, F2, FF, 33, C0, 55, 68, FB, 33, 4E, 00, 64, FF, 30, 64, 89, 20, 8D, 55, E8, A1, C0, B8, 4E, 00, 8B, 00, E8, 96, 8F, FC, FF, 8B, 45, E8, 8D, 55, EC, E8, 33, 85, F2, FF, 8B, 45, EC, E8, DF, 19, F2, FF, 50, 6A, FF, 6A, 00, E8, 0D, 3A, F2, FF, 8B, D8, E8, 8E, 3B, F2, FF, 3D, B7, 00, 00, 00, 75, 08, 53, E8, 41, 3D, F2, FF, EB, 3B, A1, C0, B8, 4E, 00, 8B, 00, E8, AF, 88, FC, FF, 8B, 0D, C4, B3, 4E, 00, A1, C0, B8, 4E, 00... 
[+]

Entropy:

6.6262

Developed / compiled with:

Microsoft Visual C++

Code size:

905.5 KB (927,232 bytes)

Program Uninstaller

Program name:

Windows Smart Pack

Display publisher:

Windows Smart Pack

Display version:

1.0

Uninstall string:

C:\Program Files\smartmanager\uninstall_smartmanager.exe delete

The file uninstall_smartmanager.exe has been discovered within the following program.

Windows Smart Pack by Now Media Corp.

54% remove it

Remove uninstall_smartmanager.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.