home

hppro.exe

Home Plan Pro

Home Plan Software

This is a setup and installation application. The file has been seen being downloaded from api.viglink.com.
Publisher:
Home Plan Software   (signed by Home Plan Software)

Product:
Home Plan Pro

Description:
Home Plan Pro Setup

Version:
5.3.1.2

MD5:
6a4361d0ff61e79b9968c610f531cedc

SHA-1:
3ed279cbdd9b7d50f541fb900a5d1ba7de08d5f3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 10:30:55 AM UTC  (today)

File size:
3.8 MB (3,992,032 bytes)

Product version:
5.3.1.2

Copyright:
Copyright© Home Plan Software 1990-2012

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\documents and settings\utilisateur\mes documents\downloads\hppro.exe

Digital Signature
Signed by:
Home Plan Software

Authority:
thawte, Inc.

Valid from:
3/27/2015 1:00:00 AM

Valid to:
6/20/2017 12:59:59 AM

Subject:
CN=Home Plan Software, OU=SECURE APPLICATION DEVELOPMENT, O=Home Plan Software, L=Mokelumne Hill, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
74124C6BB992851F8AECFF3656F040D8

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:Bj3NzRix88r8EYBPHuDcMzdQuL3821dm4aekhJ5FK:B3NzRY8m8t23zKI311dmHeQc

Entry address:
0x14000

Entry point:
90, 90, 68, 47, D3, 2C, 00, 58, 68, 26, 40, 41, 00, 5E, 90, 90, 68, 98, 05, 00, 00, 5F, 90, FF, 34, 3E, 31, 04, 24, 8F, 04, 3E, 90, 83, EF, 04, 90, 75, F0, 90, 90, 90, AF, AE, 2D, 00, 47, D3, 2C, 00, 47, D3, 6C, 00, BF, 76, 2C, 00, A7, E1, 16, 00, A7, EA, 16, 00, 47, 63, 2E, 00, B8, 2C, D3, FF, F3, 03, 6C, 00, 23, 01, 6C, 00, 3B, 01, 6C, 00, 47, D3, 2C, 00, 47, D3, 2C, 00, 47, D3, 2C, 00, F3, 75, 2C, 00, 25, 01, 2C, 00, 3D, 01, 2C, 00, 47, D3, 2C, 00, 47, D3, 2C, 00, 47, D3, 2C, 00, 47, D3, 2C, 00, 5B, 02...
 
[+]

Code size:
39.5 KB (40,448 bytes)

The file hppro.exe has been seen being distributed by the following URL.

http://api.viglink.com/api/click?format=go&jsonp=vglnk_146574929912811&key=e8ea44687117f412786f78e9ef4b9ad6&libId=ipcti8du0101102a000DA7gbtykzi&loc=http://azharengineering.yoo7.com/t1136-topic&v=1&exp=-100:CILITE:167&type=U&out=http://www.homeplanpro.com/.../hppro.exe&ref=https://search.yahoo.com/&title=?????? ???? ????? ????? ????????&txt=http://www.homeplanpro.com/.../hppro.exe

Scan hppro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.