» bellcmd.exe
Overview
Analysis
File Details
Behaviors (1)

bellcmd.exe

AcroVista Software

It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time.

File name:

bellcmd.exe

Publisher:

AcroVista Software (signed and verified)

Version:

5.0.0.0

MD5:

0e4ce65159ef10b72b29ca25d018d322

SHA-1:

983d3274fbe6af57df670d62d9f4dff9fb68bda2

SHA-256:

5ec49360bec13f961706b259d59eea76b6b38af3048001505c869c4eabed903e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 12:15:10 AM UTC (today)

File size:

12.8 MB (13,405,112 bytes)

Product version:

5.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\bellcommander\bellcmd.exe

Digital Signature

Signed by:

AcroVista Software

Authority:

COMODO CA Limited

Valid from:

7/24/2011 5:00:00 PM

Valid to:

7/24/2016 4:59:59 PM

Subject:

CN=AcroVista Software, O=AcroVista Software, STREET=12016 Sky West Dr., L=Austin, S=TX, PostalCode=78758, C=US

Issuer:

CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00B005849303C9212732CB8D144BF73A5B

File PE Metadata

Compilation timestamp:

6/10/2015 11:03:27 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:yakd2Fm89dn+b6UFcnv+GL2TdeoTtm1LyFywLLxrtgZtrtx:yaksFm89R+bpcBL2TdRta8Lx+Ztrtx

Entry address:

0x9B5E58

Entry point:

55, 8B, EC, B9, 0A, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, A0, EF, D9, 00, E8, 50, 6F, 65, FF, 33, C0, 55, 68, 00, 66, DB, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, A6, 5E, DB, 00, 64, FF, 30, 64, 89, 20, A1, 8C, 7D, DD, 00, 8B, 00, E8, F8, 05, 7C, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 2A, E9, D9, 0B, 65, FF, 6A, 00, 6A, FF, 6A, FF, 6A, 00, 0F, B7, 0D, 10, 66, DB, 00, 33, D2, B8, 20, 66, DB, 00, E8, B6, 65, 77, FF, E8, 81, 10, 65, FF, E8, D0, 10, 65, FF, A1, E8, 74, DD, 00, C6, 00, 00... 
[+]

Entropy:

6.5970

Developed / compiled with:

Microsoft Visual C++

Code size:

9.7 MB (10,178,560 bytes)

Scheduled Task

Task name:

Wake from Sleep

Trigger:

Daily (Runs daily at 11:21 AM)

Description:

Wake up my computer.

Scan bellcmd.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.