home

hboff.exe

Home'Bank Offline Plus 5.10

ING BELGIE NV

Publisher:
ING  (signed by ING BELGIE NV)

Product:
Home'Bank Offline Plus 5.10

Version:
5.01

MD5:
06e641d6b90b3c9e3b01d88cbda15e6e

SHA-1:
df1766dd547adc88a9c98d99ab05831d8a7bb10a

SHA-256:
bab3f80b159eb095b72ea4bf60b01c527ec0070bc831d27ab2ad036e561a321b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 6:57:50 PM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/VBInject.AF.gen
4.6.5.141

File size:
6.6 MB (6,954,896 bytes)

Product version:
5.01

Copyright:
Copyright ING 2010

Original file name:
hboff.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ing\off-line\hboff.exe

Digital Signature
Signed by:
ING BELGIE NV

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/17/2010 1:00:00 AM

Valid to:
2/18/2012 12:59:59 AM

Subject:
CN=ING BELGIE NV, OU=Authenticode for Home'Bank applications, O=ING BELGIE NV, L=Brussels, S=Brussels, C=BE

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4AD61303A8188EAE99574E8E3A6B24E2

File PE Metadata
Compilation timestamp:
8/25/2010 2:52:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:4m86zfehxyCFvBuCIrrnxPNQdl8IuSqIsccX:58hhlvBuRrnxPNil8IuSqtF

Entry address:
0x1498

Entry point:
68, 3C, 30, 40, 00, E8, F0, FF, FF, FF, 00, 00, 60, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 38, 00, 00, 00, FD, E1, DD, 13, EB, 4B, 4B, 4E, BA, DF, 32, DF, E8, BD, 5D, 6F, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 48, 42, 4F, 46, 46, 00, 00, 00, 48, 6F, 6D, 65, 62, 61, 6E, 6B, 20, 4F, 66, 66, 6C, 69, 6E, 65, 20, 50, 6C, 75, 73, 20, 35, 2E, 31, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, D8, 00, 00, 00, A8, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 4B, 02, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
6.6 MB (6,897,664 bytes)

Scan hboff.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.