home

HPMClient_x64.exe

Hansoft Client

Hansoft AB

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Hansoft Client’.
Publisher:
Hansoft AB  (signed and verified)

Product:
Hansoft Client

Version:
7.5017

MD5:
8006966a859316601e5750bffb3e0a6c

SHA-1:
6b24b68defdd5273a858659199c9e7531dbdfcb8

SHA-256:
767d6e8147e0bd8b853504d45242035400e5484daf2634cdb9e937654120b5b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:54:38 AM UTC  (today)

File size:
40 MB (41,929,800 bytes)

Product version:
7.5017

Copyright:
Copyright © 2014 Hansoft AB. All rights reserved.

Original file name:
HPMClient_x64.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\project manager client\hpmclient_x64.exe

Digital Signature
Signed by:
Hansoft AB

Authority:
GlobalSign nv-sa

Valid from:
9/5/2011 4:15:22 PM

Valid to:
9/5/2014 4:15:22 PM

Subject:
E=contact@hansoft.se, CN=Hansoft AB, O=Hansoft AB, C=SE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BA1AE7B993AC9226EFC968054A038718

File PE Metadata
Compilation timestamp:
2/12/2014 1:46:07 PM

OS version:
5.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:JFF9Av4Ybvcwds7uoqcpG7o9SgkazlBMFGXs7f4otc8/f7BH+IR5XzJsv6tWKFdH:N9kzygwGcdITG0lwmvV

Entry address:
0x196990

Entry point:
48, 83, EC, 28, C7, 05, B6, 4D, AA, 01, 02, 00, 00, 00, E8, 4D, FE, D4, 00, E8, 08, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, 48, 83, EC, 58, C7, 44, 24, 24, 00, 00, 00, 00, 48, C7, 44, 24, 38, 00, 00, 00, 00, 33, C0, 66, 89, 44, 24, 20, E8, A7, 02, D5, 00, 66, 89, 44, 24, 20, B9, 02, 00, 00, 00, E8, 20, F3, FF, FF, E8, 5B, 01, 00, 00, 89, 44, 24, 30, 33, D2, 33, C9, E8, AE, 40, F6, FF, E8, 39, A6, F1, FF, 85, C0, 75, 0A, B9, 1C, 00, 00, 00, E8, 0B, 01, 00, 00, E8, 56, CC, F6, FF, E8, 11, F3, FF, FF, 85...
 
[+]

Code size:
22.8 MB (23,873,536 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Hansoft Client

Command:
C:\Program Files\project manager client\hpmclient_x64.exe -autostart


Scan HPMClient_x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.