vfon.EXE

Softfoundry VMEET

SOFTFOUNDRY International Pte Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Softfoundry VMEET’.
Publisher:
SOFTFOUNDRY International Pte Ltd  (signed and verified)

Product:
Softfoundry VMEET

Version:
1, 0, 1, 50

MD5:
cf20115d80520a96bc11edae8d1cdb86

SHA-1:
49f5fbda1f614bc3272b0efea56b829f1dc82252

SHA-256:
890c04ef75f75eb066f4a80ea588b2c00b3cca820378aebc67b972b6f24b8377

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 1:07:26 AM UTC  (today)

File size:
18.6 MB (19,519,880 bytes)

Product version:
3, 3, 0, 0

Copyright:
Copyright (C) 2003-2013 Softfoundry International Pte Ltd.

Original file name:
vfon.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\softfoundry vmeet\vfon.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
12/7/2011 7:00:00 AM

Valid to:
12/8/2014 6:59:59 AM

Subject:
CN=SOFTFOUNDRY International Pte Ltd, OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SOFTFOUNDRY International Pte Ltd, L=Singapore, S=Singapore, C=SG

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5DE24DA62E884E4B150218DA1A9C9753

File PE Metadata
Compilation timestamp:
3/4/2014 2:38:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
196608:mr71gfVM5NVDZL9h9P8kqYNz1DcsX3UlZQM8DXdtH69p:c2M/R8OtH69p

Entry address:
0xA21450

Entry point:
6A, 74, 68, D0, 21, 27, 01, E8, 04, 06, 00, 00, 33, DB, 89, 5D, E0, 53, 8B, 3D, 40, 95, 13, 01, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, 99, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, 99, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 5D, FC, 6A, 02, FF, 15, E0, AF, 13, 01, 59, 83, 0D, 4C, 42, 40, 01, FF, 83...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
13.2 MB (13,860,864 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Softfoundry VMEET

Command:
"C:\Program Files\softfoundry vmeet\vfon.exe"


Scan vfon.EXE - Powered by Reason Core Security