home

macros.exe

Agbis Company, LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Desktop Macros’.
Publisher:
Agbis Company, LLC  (signed and verified)

Version:
2.1.0.6

MD5:
92423d21d8ba0290f6660e3876e2c93c

SHA-1:
a5c98eaa70aa4fd834136c9af597ea07c71222a2

SHA-256:
bb32a45417bf8b43f6ed2b12225a9fb260196d026b85a6db99e96718df168fec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:21:55 AM UTC  (today)

File size:
1.4 MB (1,480,760 bytes)

Product version:
2.1.0.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\desktop macros\macros.exe

Digital Signature
Signed by:
Agbis Company, LLC

Authority:
The USERTRUST Network

Valid from:
1/16/2008 12:00:00 AM

Valid to:
1/15/2009 11:59:59 PM

Subject:
CN="Agbis Company, LLC", O="Agbis Company, LLC", STREET="Kuznetskstroevsky 23, 3", L=Novokuznetsk, S=Kemerovo, PostalCode=654000, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1E60FD8223540AB9E468FBD74875DCD0

File PE Metadata
Compilation timestamp:
12/22/2008 3:22:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:BMwZGl6q4xsZjFcdvTyC44SfRAKRXbd8/xQicnyPBDYGegFbLp9Vo3w0A:BLZGl6q4GxFevTyASZAsLkQiPPBDYz6m

Entry address:
0x1000

Entry point:
68, 01, 40, 6B, 00, E8, 01, 00, 00, 00, C3, C3, 82, ED, 0B, FC, A2, D1, A0, A5, 34, 59, 52, 60, 59, 13, 23, DE, D6, 8E, 32, 58, 48, 22, 6A, 42, F7, 81, C2, 5B, 20, 04, 6C, CA, 95, 86, DB, 35, 41, E9, DE, 1B, F1, 25, 21, 42, 00, 58, A3, C5, DA, 9F, 47, 94, AD, FF, 18, 4A, 41, 0F, 47, B8, 4D, 66, 6F, 08, 69, C1, 38, 44, CD, 29, 8B, 64, 7D, 12, A5, 59, B0, 5E, 2B, D1, 61, E2, 89, D9, 63, 49, 94, E8, 64, 01, 23, 60, 3E, 69, DE, DA, F1, 24, B4, 00, 44, B9, 50, 1D, D6, C8, 8A, AF, 15, 96, 85, 24, 21, 3A, 28, EA...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
2.1 MB (2,201,088 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Desktop Macros

Command:
C:\Program Files\desktop macros\macros.exe


Scan macros.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.