home

VFrtGuest.sys

VMFort Guest Additions

VMCraft, Inc

It runs as a Windows kernel mode device driver named “VmfortHypr Guest Driver”.
Publisher:
VMCraft Inc  (signed by VMCraft, Inc)

Product:
VMFort Guest Additions

Description:
VmfortHypr Guest Driver

Version:
4.2.4.1481

MD5:
0cc37ab7ae88ed31e8070e9f49720987

SHA-1:
6d372e1534f69a45b3debda18b5685a6c295b8da

SHA-256:
1bb6a39ff2340790af632646e3dd57b9847e6659fa6760875b24cf3a4f364448

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/8/2025 11:53:55 AM UTC  (today)

File size:
103.2 KB (105,680 bytes)

Product version:
4.2.4.1481

Copyright:
Copyright (C) 2009-2014 VMCraft Inc

Original file name:
VFrtGuest.sys

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\drivers\vfrtguest.sys

Digital Signature
Signed by:
VMCraft, Inc

Authority:
VeriSign, Inc.

Valid from:
8/22/2013 9:00:00 AM

Valid to:
10/22/2014 8:59:59 AM

Subject:
CN="VMCraft, Inc", OU=Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="VMCraft, Inc", L=Seocho-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4B4AFECBC25B0CD7A6411B27369111A5

File PE Metadata
Compilation timestamp:
6/18/2014 1:40:42 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
10.0

CTPH (ssdeep):
1536:2aRVahI8ncxFq3Dwmbz7ljoWl6d3+HoEJrrHP428cC2tOJLjYX3Hx/X6H4Uhqh7J:2aR/vqB72lS4eR/Y4Uhsl

Entry address:
0x1B000

Entry point:
55, 8B, EC, 83, EC, 0C, 56, 33, F6, 56, 8D, 45, F4, 50, 8D, 4D, FC, 51, 8D, 55, F8, 52, FF, 15, 44, 10, 41, 00, 8B, 45, F8, 83, E8, 04, 0F, 84, 83, 00, 00, 00, 48, 74, 4E, 48, 74, 0C, B8, 6C, 02, 00, C0, 5E, 8B, E5, 5D, C2, 08, 00, 8B, 45, FC, 83, F8, 03, 77, EC, FF, 24, 85, 20, B1, 41, 00, C7, 05, B0, 54, 41, 00, 05, 00, 00, 00, EB, 60, C7, 05, B0, 54, 41, 00, 06, 00, 00, 00, EB, 54, C7, 05, B0, 54, 41, 00, 07, 00, 00, 00, EB, 48, C7, 05, B0, 54, 41, 00, 08, 00, 00, 00, EB, 3C, 8B, 45, FC, 83, E8, 00, 74...
 
[+]

Entropy:
6.6496

Developed / compiled with:
Microsoft Visual C++

Code size:
69 KB (70,656 bytes)

Driver
Display name:
VmfortHypr Guest Driver

Service name:
VFrtGuest

Type:
Kernel device driver (KernelDriver)

Group:
Base


Scan VFrtGuest.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.