home

smart bill profesional plus.exe

Intelligent IT

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SmartBillSys’.
Publisher:
Intelligent IT  (signed and verified)

MD5:
e7db814dce787a20dd3d16387e4fea4a

SHA-1:
8c32efc4bb0153e174a08c891526b6b15d794eaa

SHA-256:
cfc5ea40b5359721f2f8e64a9e524fb938616559ecbeb2b0e0a9f719480ea44e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 4:02:15 PM UTC  (today)

File size:
4.6 MB (4,819,864 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Intelligent IT

Authority:
Thawte, Inc.

Valid from:
2/25/2014 2:00:00 AM

Valid to:
2/26/2015 1:59:59 AM

Subject:
CN=Intelligent IT, O=Intelligent IT, L=Sibiu, S=Sibiu, C=RO

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7D61902703177DAFEAB3E52E454E7E48

File PE Metadata
Compilation timestamp:
6/3/2014 4:42:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
98304:tVUvKA2zcta4i3o+/2EWWgQrqJodu8gr0ib:tVxQjiL/yWgQrqggr0ib

Entry address:
0x1290

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, B7, 3F, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00...
 
[+]

Entropy:
7.9051

Packer / compiler:
MingWin32

Code size:
18 KB (18,432 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SmartBillSys

Command:
"C:\smart bill profesional plus 2014\smart bill profesional plus.exe" \s


Scan smart bill profesional plus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.