home

tomtomhome.exe

TomTom HOME

TomTom International BV

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TomTomHOME.exe’.
Publisher:
TomTom  (signed by TomTom International BV)

Product:
TomTom HOME

Description:
TomTom HOME

Version:
1.3.30

MD5:
13b95946a5b6b5c51e3050b16e5296ec

SHA-1:
8a77283be13ad86b93606d374f0176481ce15804

SHA-256:
860b62b614ffd32da485f2f8ef38c0824456221db08c7c331144913d714c1fa3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:41:47 AM UTC  (today)

File size:
3.4 MB (3,539,624 bytes)

Product version:
1.3.30

Copyright:
Copyright (C) 2006 TomTom International B.V.

Trademarks:
TomTom Go, TomTom Rider, TomTom ONE, TomTom HOME

Original file name:
TomTom HOME.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tomtom home\tomtomhome.exe

Digital Signature
Signed by:
TomTom International BV

Authority:
VeriSign, Inc.

Valid from:
12/22/2005 1:00:00 AM

Valid to:
12/23/2006 12:59:59 AM

Subject:
CN=TomTom International BV, OU=Development & Testgroup, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TomTom International BV, L=Amsterdam, S=Noord-Holland, C=NL

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1D8114FEF1E1C2CAB40C30F5CFE96928

File PE Metadata
Compilation timestamp:
8/4/2006 12:06:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:BoZoud/HAUj05gqK/wA31jopyz53VjxPcGjwTJN:BczgUQ5gdWpypNx

Entry address:
0x212A7A

Entry point:
E8, 45, 0B, 01, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 10, FF, 75, 0C, 8D, 4D, F0, E8, 5C, E5, FF, FF, 0F, B6, 45, 08, 8B, 4D, F0, 8B, 89, C8, 00, 00, 00, 0F, B7, 04, 41, 25, 00, 80, 00, 00, 80, 7D, FC, 00, 74, 07, 8B, 4D, F8, 83, 61, 70, FD, C9, C3, 6A, 00, FF, 74, 24, 08, E8, BF, FF, FF, FF, 59, 59, C3, 68, 03, 01, 00, 00, FF, 74, 24, 08, E8, 18, 02, 01, 00, 59, 59, C3, 6A, 04, FF, 74, 24, 08, E8, 0A, 02, 01, 00, 59, 59, C3, 6A, 08, FF, 74, 24, 08, E8, FC, 01, 01, 00, 59, 59, C3, 68, 07, 01, 00, 00...
 
[+]

Code size:
2.4 MB (2,563,072 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TomTomHOME.exe

Command:
"C:\Program Files\tomtom home\tomtomhome.exe" -s


Scan tomtomhome.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.