home

conferencecontrols.exe

Conference Controls

Ecovate, Inc.

Publisher:
Conferencing Service  (signed by Ecovate, Inc.)

Product:
Conference Controls

Version:
6.0.6

MD5:
da05d285d1a421f324af4d6be8e78830

SHA-1:
b0c5e2d5cfb7d8d47578a0f6049df4afb8227237

SHA-256:
c3afa5865b6c7b8e4b40f7ebbc91c584e8a26af72958a12512958c437ef60271

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 1:12:19 AM UTC  (today)

File size:
29.4 MB (30,781,512 bytes)

Product version:
6.0.6

Original file name:
moderator-win32.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\conferencecontrols.exe

Digital Signature
Signed by:
Ecovate, Inc.

Authority:
thawte, Inc.

Valid from:
1/27/2016 7:00:00 PM

Valid to:
1/27/2018 6:59:59 PM

Subject:
CN="Ecovate, Inc.", OU=Engineering, O="Ecovate, Inc.", L=Denver, S=Colorado, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
3569275384C20463F633A343D721904F

File PE Metadata
Compilation timestamp:
12/11/2015 3:02:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.21

CTPH (ssdeep):
393216:GZxNqC1FqylB5dhkiObwmBeplfIZni/pusQzo/+:WqC1FqW5dhkiUwLpiZniA9J

Entry address:
0x1700

Entry point:
55, 89, E5, 83, EC, 08, C7, 05, C0, EA, 13, 02, 01, 00, 00, 00, E8, FB, 0E, B5, 01, C9, E9, 85, FA, FF, FF, 90, 8D, 74, 26, 00, 55, 89, E5, 83, EC, 08, C7, 05, C0, EA, 13, 02, 00, 00, 00, 00, E8, DB, 0E, B5, 01, C9, E9, 65, FA, FF, FF, 90, 90, 90, 90, 90, 50, 4B, 03, 04, 0A, 00, 00, 08, 00, 00, 54, 68, 8B, 47, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 09, 00, 00, 00, 4D, 45, 54, 41, 2D, 49, 4E, 46, 2F, 50, 4B, 03, 04, 0A, 00, 00, 08, 00, 00, 54, 68, 8B, 47, 25, 3D, 51, B6, 1B, 03, 00, 00, 1B, 03, 00...
 
[+]

Entropy:
6.2030

Code size:
27.4 MB (28,705,792 bytes)

The file conferencecontrols.exe has been seen being distributed by the following URL.

https://laxcr6.readytalk.com/interface/bin/.../ConferenceControls.exe

Scan conferencecontrols.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.