home

VBoxControl.exe

VirtualBox Additions Utility

InnoTek Systemberatung GmbH

Publisher:
innotek GmbH  (signed by InnoTek Systemberatung GmbH)

Product:
VirtualBox Additions Utility

Version:
1.5.2

MD5:
ba6d40fc83409367fa95cd236bac342d

SHA-1:
72372ec53241b378cbd5ac26fc0a1f0183765ceb

SHA-256:
22088c6f3f7cf357d7c3fa7c63488b7302c420f0db21f401f48081b08bb7db49

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:31:01 PM UTC  (a few moments ago)

File size:
71 KB (72,672 bytes)

Product version:
1.5.2

Copyright:
(C) 2004-2007 innotek GmbH

Original file name:
VBoxControl.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\driver\vboxguest\vboxcontrol.exe

Digital Signature
Signed by:
InnoTek Systemberatung GmbH

Authority:
GlobalSign nv-sa

Valid from:
1/9/2007 2:35:15 PM

Valid to:
1/9/2008 2:35:15 PM

Subject:
E=info@innotek.de, CN=InnoTek Systemberatung GmbH, O=InnoTek Systemberatung GmbH, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011006DAED6B

File PE Metadata
Compilation timestamp:
10/18/2007 3:09:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
768:r0CKFlVKB9nQYn14KUQogpJorjslT+DIUXb9V1AC/oX1+dLXcuCt63EKwLwJi18:gCKLVKA2yKh8jsN+DZ2LO6t6URIiG

Entry address:
0x2874

Entry point:
E8, C5, 35, 00, 00, E9, 40, FE, FF, FF, B8, 08, E0, 40, 00, C3, A1, 40, 11, 41, 00, 85, C0, 56, 6A, 14, 5E, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, 40, 11, 41, 00, 6A, 04, 50, E8, 67, 36, 00, 00, 85, C0, 59, 59, A3, 24, 01, 41, 00, 75, 1E, 6A, 04, 56, 89, 35, 40, 11, 41, 00, E8, 4E, 36, 00, 00, 85, C0, 59, 59, A3, 24, 01, 41, 00, 75, 05, 6A, 1A, 58, 5E, C3, 33, D2, B9, 08, E0, 40, 00, EB, 05, A1, 24, 01, 41, 00, 89, 0C, 02, 83, C1, 20, 83, C2, 04, 81, F9, 88, E2, 40, 00, 7C, EA, 6A...
 
[+]

Entropy:
5.8233

Code size:
40 KB (40,960 bytes)

Scan VBoxControl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.