enablebho.exe

SHOPMANIA NET SRL

The executable enablebho.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
SHOPMANIA NET SRL  (signed and verified)

MD5:
77f18470390df7082fcaff4e69d0a1d4

SHA-1:
f88f370dc2b280c7b9a73453bd53120599bcbd1d

SHA-256:
727d86bbdd1dc111562f21b0ba17b446d5ac5cc7945b445112908a2f6e2ac301

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
5/17/2024 12:06:01 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.5.19

File size:
113.6 KB (116,296 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\temp\{random}.tmp\enablebho.exe

Digital Signature
Authority:
StartCom Ltd.

Valid from:
7/1/2014 7:23:11 PM

Valid to:
7/1/2016 8:54:56 AM

Subject:
E=support@shopmania.net, CN=SHOPMANIA NET SRL, O=SHOPMANIA NET SRL, L=Ploiesti, S=Prahova, C=RO, Description=x37nwEzejddu0mzf

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0F17

File PE Metadata
Compilation timestamp:
5/5/2012 10:35:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

Entry address:
0x4757

Entry point:
E8, A6, 6A, 00, 00, E9, 95, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A0, 01, 00, 00, 81, F9, 80, 00, 00, 00, 72, 1C, 83, 3D, AC, B3, 41, 00, 00, 74, 13, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 05, E9, E9, 6A, 00, 00, F7, C7, 03, 00, 00, 00, 75, 14, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 29, F3, A5, FF, 24, 95, E0, 48, 40, 00, 8B, C7, BA, 03, 00, 00, 00...
 
[+]

Code size:
73.5 KB (75,264 bytes)

Remove enablebho.exe - Powered by Reason Core Security