home

ActiveSMART.exe

Active SMART

Ariolic Software Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ActiveSMART’.
Publisher:
Ariolic Software (http://www.ariolic.com)  (signed by Ariolic Software Ltd)

Product:
Active SMART

Description:
Active SMART Agent

Version:
1, 5, 0, 550

MD5:
938757bb80bfca9dac8cab3cd33f67ff

SHA-1:
3e7fa65d1c0e46bdb34fbe2ca9d5f7f7af26da59

SHA-256:
c2c038d4fc4e35758d418fd4edac44276d5372626baf8d515fe2b70c9626b858

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 3:12:02 AM UTC  (today)

File size:
301.6 KB (308,888 bytes)

Product version:
1, 5, 0, 550

Copyright:
Copyright © 2001-2007 Ariolic Software, Ltd.

Original file name:
ActiveSMART.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\powerx active smart\activesmart.exe

Digital Signature
Signed by:
Ariolic Software Ltd

Authority:
GlobalSign nv-sa

Valid from:
1/24/2007 8:35:52 PM

Valid to:
1/24/2008 8:35:52 PM

Subject:
E=diverg@gmail.com, CN=Ariolic Software Ltd, O=Ariolic Software Ltd, C=UA

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011053E3F368

File PE Metadata
Compilation timestamp:
7/13/2007 12:52:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:q0YrwP16pVfZXbEucBPE+pvjmAOG38YlI:qC6pVfZJyPJJSg7e

Entry address:
0x11F32

Entry point:
E8, 4E, D5, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 53, 56, 8B, 75, 08, 57, 33, FF, 39, 7D, 14, 75, 10, 3B, F7, 75, 10, 39, 7D, 0C, 75, 12, 33, C0, 5F, 5E, 5B, 5D, C3, 3B, F7, 74, 07, 8B, 5D, 0C, 3B, DF, 77, 1B, E8, D4, 00, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 18, 45, 00, 00, 83, C4, 14, 8B, C6, EB, D5, 39, 7D, 14, 75, 05, 66, 89, 3E, EB, C9, 8B, 55, 10, 3B, D7, 75, 05, 66, 89, 3E, EB, CF, 83, 7D, 14, FF, 8B, C6, 75, 14, 0F, B7, 0A, 66, 89, 08, 40, 40, 42, 42, 66, 3B, CF, 74, 24, 4B, 75, EE...
 
[+]

Entropy:
6.2340

Code size:
164 KB (167,936 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ActiveSMART

Command:
C:\Program Files\powerx active smart\activesmart.exe


Scan ActiveSMART.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.