home

winplan.exe

Agromatic AS

It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
Agromatic AS  (signed and verified)

Description:
Skifteplan hovedprogram

Version:
2.0.18.501

MD5:
bc6a3f8dd09a6ddef3df15d01a4f65b0

SHA-1:
74f934ecf1c0169a1d532350e19bb657908886f3

SHA-256:
ba6bf88391c6c00365200437673b41fadcc13f0409f3671567d556b3a499ee28

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:30:40 PM UTC  (today)

File size:
5.7 MB (5,950,088 bytes)

Product version:
2.18

Copyright:
Copyright (c) Agromatic AS 1988-2009

File type:
Executable application (Win32 EXE)

Language:
Norsk bokmål (Norge)

Digital Signature
Signed by:
Agromatic AS

Authority:
The USERTRUST Network

Valid from:
8/26/2007 2:00:00 AM

Valid to:
8/26/2010 1:59:59 AM

Subject:
CN=Agromatic AS, O=Agromatic AS, STREET=Larsgårdsveien 4, STREET=Serviceboks 9, L=Ålesund, S=N/A, PostalCode=6025, C=NO

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
11220B52A88AE834A15278024E08CDE8

File PE Metadata
Compilation timestamp:
10/21/2009 3:20:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:Qx21o6AZvc0sGuHrdU2w4lhoYY7hL8M9c0j+gii+l5c71gD:tu6oUKuq2w4lhoYY7hL8MNGikHD

Entry address:
0x3EC434

Entry point:
55, 8B, EC, 81, C4, DC, FE, FF, FF, 53, 33, C0, 89, 85, E0, FE, FF, FF, 89, 85, DC, FE, FF, FF, 89, 45, E4, 89, 45, EC, 89, 45, E8, B8, 70, 75, 7E, 00, E8, ED, C4, C1, FF, 33, C0, 55, 68, 9E, C5, 7E, 00, 64, FF, 30, 64, 89, 20, E8, 72, 71, C1, FF, 8B, D8, 83, FB, 01, 7C, 24, 8D, 55, E8, 8B, C3, E8, C1, 71, C1, FF, 8B, 45, E8, 8D, 55, EC, E8, 5E, ED, C1, FF, 8B, 45, EC, BA, B4, C5, 7E, 00, E8, 11, 9F, C1, FF, 74, 40, E8, BE, 89, D5, FF, 84, C0, 0F, 85, C9, 00, 00, 00, 8D, 95, E4, FE, FF, FF, A1, 6C, C4, 7B...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
3.9 MB (4,106,752 bytes)

Scheduled Task
Task name:
RunAsStdUser Task

Trigger:
Registration (Runs on registration)


Scan winplan.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.