» InstantHousecall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

InstantHousecall.exe

Instant Housecall

It runs as a separate (within the context of its own process) windows Service named “Instant Housecall Service”. This is installed with Instant Housecall.

File name:

Publisher:

Instant Housecall (signed and verified)

Product:

Instant Housecall

Description:

Instant Housecall - Remote Support

Version:

6.3.0.4630

MD5:

de9b04e525a270301225ca1e6f2a985d

SHA-1:

2d206eeace63872b3bc3aea2435e9f6ea6fcfc3d

SHA-256:

55a022055704c65beea47f82ad303fc1099c3207d534d7fdf7e0c6a290bb0e15

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 5:35:08 AM UTC (today)

File size:

2 MB (2,070,192 bytes)

Product version:

6.3.0.4630

Original file name:

InstantHousecall.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\instant housecall\instanthousecall.exe

Digital Signature

Signed by:

Instant Housecall

Authority:

COMODO CA Limited

Valid from:

4/24/2013 7:00:00 PM

Valid to:

4/24/2016 6:59:59 PM

Subject:

CN=Instant Housecall, O=Instant Housecall, STREET=3075 14th Avenue, STREET=Suite 209, L=Markham, S=Ontario, PostalCode=L3R0G9, C=CA

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

14BD51DED6ECED6957CD8B865700A360

File PE Metadata

Compilation timestamp:

12/15/2015 5:55:53 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

24576:F8IG2NcpOuKnhiLmK0KVM/EygfogCAQjMmNE99Iyvmtfc94+F:F8IGMHKlygggQuIYmtfc94+F

Entry address:

0xAA418

Entry point:

E8, 13, 42, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, F1, 8B, 4D, 08, C6, 46, 0C, 00, 85, C9, 75, 66, E8, 5B, 28, 00, 00, 8B, D0, 89, 56, 08, 8B, 4A, 6C, 89, 0E, 8B, 4A, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, DC, 58, 57, 00, 74, 11, A1, A4, 59, 57, 00, 85, 42, 70, 75, 07, E8, D6, 45, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 50, 52, 57, 00, 74, 15, 8B, 4E, 08, A1, A4, 59, 57, 00, 85, 41, 70, 75, 08, E8, 39, 49, 00, 00, 89, 46, 04, 8B, 4E, 08, 8B, 41, 70, A8, 02, 75, 16, 83, C8, 02, 89, 41, 70, C6, 46, 0C, 01, EB... 
[+]

Entropy:

6.3139

Code size:

1.1 MB (1,124,352 bytes)

Service

Display name:

Instant Housecall Service

Service name:

IHCserver

Type:

Win32OwnProcess

The file InstantHousecall.exe has been discovered within the following program.

Instant Housecall by Instant Housecall

Publisher's description - “Instant Housecall is a fast, easy remote access program that lets you offer remote support through firewalls. You can transfer files, and easily view and control the remote desktop. To start a session, ask your client to run Instant Housecall then click "Start Session".”

www.instanthousecall.com

12% remove it

Scan InstantHousecall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.