home

tomtomhome.exe

TomTom HOME

TomTom International BV

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TomTomHOME.exe’.
Publisher:
TomTom  (signed by TomTom International BV)

Product:
TomTom HOME

Description:
TomTom HOME

Version:
1.3.200

MD5:
cfc734bd013178a96f6255f34ece21c6

SHA-1:
15b17e833f3be3c0e7fc420ff5be3ad18e8c617e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:30:04 AM UTC  (today)

File size:
3.4 MB (3,569,880 bytes)

Product version:
1.3.200

Copyright:
Copyright (C) 2006 TomTom International B.V.

Trademarks:
TomTom Go, TomTom Rider, TomTom ONE, TomTom HOME

Original file name:
TomTom HOME.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\tomtom home\tomtomhome.exe

Digital Signature
Signed by:
TomTom International BV

Authority:
VeriSign, Inc.

Valid from:
12/21/2005 6:00:00 PM

Valid to:
12/22/2006 5:59:59 PM

Subject:
CN=TomTom International BV, OU=Development & Testgroup, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TomTom International BV, L=Amsterdam, S=Noord-Holland, C=NL

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1D8114FEF1E1C2CAB40C30F5CFE96928

File PE Metadata
Compilation timestamp:
9/25/2006 9:58:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:Y6lRiF9bcBdid2hFbmRHw9BF5yI83gjOTl:Y6lRifWi2hF6GM/3J

Entry address:
0x2175DA

Entry point:
E8, 05, 0E, 01, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 10, FF, 75, 0C, 8D, 4D, F0, E8, 2C, E5, FF, FF, 0F, B6, 45, 08, 8B, 4D, F0, 8B, 89, C8, 00, 00, 00, 0F, B7, 04, 41, 25, 00, 80, 00, 00, 80, 7D, FC, 00, 74, 07, 8B, 4D, F8, 83, 61, 70, FD, C9, C3, 6A, 00, FF, 74, 24, 08, E8, BF, FF, FF, FF, 59, 59, C3, 68, 03, 01, 00, 00, FF, 74, 24, 08, E8, D8, 04, 01, 00, 59, 59, C3, 6A, 04, FF, 74, 24, 08, E8, CA, 04, 01, 00, 59, 59, C3, 6A, 08, FF, 74, 24, 08, E8, BC, 04, 01, 00, 59, 59, C3, 68, 07, 01, 00, 00...
 
[+]

Entropy:
6.4508

Code size:
2.5 MB (2,586,624 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TomTomHOME.exe

Command:
"C:\Program Files\tomtom home\tomtomhome.exe" -s


Scan tomtomhome.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.