» winplan.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

winplan.exe

Skifteplan

Agromatic AS

It runs as a scheduled task under the Windows Task Scheduler. This is installed with Skifteplan.

File name:

winplan.exe

Publisher:

Agromatic AS (signed and verified)

Product:

Skifteplan

Description:

Skifteplan hovedprogram

Version:

2.0.88.2415

MD5:

f842ff6e86e57f0f8a035150a8eb3750

SHA-1:

9d7a0cebb9c3d04dce4317d1fc62aa70cbc9e02a

SHA-256:

7dfbe3c66886c7c2a77cade23789c320a8afeb4943b5247dde446796423350e6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 2:29:27 PM UTC (today)

File size:

11.4 MB (11,995,464 bytes)

Product version:

2.88

File type:

Executable application (Win32 EXE)

Language:

Norwegian (Norway)

Digital Signature

Signed by:

Agromatic AS

Authority:

GoDaddy.com, Inc.

Valid from:

10/22/2013 4:08:30 PM

Valid to:

10/22/2016 4:08:30 PM

Subject:

CN=Agromatic AS, O=Agromatic AS, L=Alesund, S=More og Romsdal, C=NO

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4B73E1E80CFF79

File PE Metadata

Compilation timestamp:

5/6/2015 12:23:07 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:2BD8kObE8NC+Bop2036tNs9zMxr2rFl/Y5n33Vybf1/w:2+xbpc+Bop2BNs9zMgrFlg5nnQb

Entry address:

0x8E297C

Entry point:

55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, B8, C8, 69, CC, 00, E8, 69, BD, 72, FF, 33, C0, 55, 68, E2, 2A, CE, 00, 64, FF, 30, 64, 89, 20, E8, B6, 25, 72, FF, 8B, D8, 85, DB, 7E, 5E, 8D, 55, E8, 8B, C3, E8, 06, 26, 72, FF, 8B, 45, E8, 8D, 55, EC, E8, EF, 1B, 74, FF, 8B, 45, EC, BA, FC, 2A, CE, 00, E8, D6, 87, 72, FF, 75, 3A, 83, FB, 02, 7C, 29, 8D, 55, E0, 8B, C3, 48, E8, DC, 25, 72, FF, 8B, 45, E0, 8D, 55, E4, E8, C5, 1B, 74, FF, 8B, 45, E4, BA, 18, 2B, CE, 00, E8, AC, 87, 72, FF... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

8.9 MB (9,310,720 bytes)

Scheduled Task

Task name:

RunAsStdUser Task

The file winplan.exe has been discovered within the following program.

Skifteplan by Agromatic AS

About 4% of users remove it

Scan winplan.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.