home

smart bill profesional plus.exe

Intelligent IT

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SmartBillSys’.
Publisher:
Intelligent IT  (signed and verified)

MD5:
b3d8318ebbe6b56901837fcbdd2d90e8

SHA-1:
478414ddeeb81cbc24053d5e370338427bcbaf62

SHA-256:
88a6a9351654e4f8c5c42f2bc3dfce8d1add46abacb69da807231e4958640d31

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:15:55 AM UTC  (today)

File size:
2.5 MB (2,578,208 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Intelligent IT

Authority:
Thawte, Inc.

Valid from:
2/4/2013 2:00:00 AM

Valid to:
2/5/2014 1:59:59 AM

Subject:
CN=Intelligent IT, O=Intelligent IT, L=Sibiu, S=Sibiu, C=RO

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1B715F755BE1F796D6C403B9AAA82CFD

File PE Metadata
Compilation timestamp:
2/14/2013 2:36:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
49152:pyRIiTUT6AzCL4EKr4TgQgXbtAa7BbBEd45MByyIGrPSRCcaD:pyTU/OL4E6bJbtb1BElF02D

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, B7, 3F, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
7.8897

Packer / compiler:
MingWin32

Code size:
18 KB (18,432 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SmartBillSys

Command:
"C:\smart bill profesional plus\smart bill profesional plus.exe" \s


Scan smart bill profesional plus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.