home

hboff.exe

Home'Bank Offline Plus 5.00 (VIMAIRE)

ING BELGIE NV

Publisher:
ING  (signed by ING BELGIE NV)

Product:
Home'Bank Offline Plus 5.00 (VIMAIRE)

Version:
5.20.0001

MD5:
cf8d3a0dadbcd44c3e732c2bf6f46962

SHA-1:
4a27f7af3d0cfb6ff7964656758cbf479df0bbe5

SHA-256:
78c3b5846f001d62cd569650ddbfa61dc4650e6a591526f6956daf302e2c50b6

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 6:53:16 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
ADWARE/Adware.Gen7
7.11.30.172

F-Prot
W32/VBInject.AF.gen
4.6.5.141

File size:
6.7 MB (7,053,200 bytes)

Product version:
5.20.0001

Copyright:
Copyright ING 2011

Original file name:
hboff.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ing\off-line\hboff.exe

Digital Signature
Signed by:
ING BELGIE NV

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/17/2010 1:00:00 AM

Valid to:
2/18/2012 12:59:59 AM

Subject:
CN=ING BELGIE NV, OU=Authenticode for Home'Bank applications, O=ING BELGIE NV, L=Brussels, S=Brussels, C=BE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4AD61303A8188EAE99574E8E3A6B24E2

File PE Metadata
Compilation timestamp:
6/23/2011 8:29:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:lryXasFlnLXlm1vBkuIyJp3Pc508K3NZuZ1kIAS:lrWLavBksJp3Pc+8K3NZuZik

Entry address:
0x14A4

Entry point:
68, 54, 30, 40, 00, E8, F0, FF, FF, FF, 00, 00, 60, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 38, 00, 00, 00, 58, E6, 37, 50, 77, 99, 43, 41, 8C, F4, 67, A3, 6C, D6, 1A, 2D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 65, 64, 69, 74, 43, 61, 48, 42, 4F, 46, 46, 00, 73, 61, 48, 6F, 6D, 65, 62, 61, 6E, 6B, 20, 4F, 66, 66, 6C, 69, 6E, 65, 20, 50, 6C, 75, 73, 20, 35, 2E, 30, 30, 00, 3D, 20, 20, 20, 22, 00, 63, 74, 69, 76, 65, 52, 65, D8, 00, 00, 00, A8, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 3D, 02, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
6.7 MB (6,995,968 bytes)

Scan hboff.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.