home

vidalmenu.exe

VIDAL SA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Allin1Convert_8h Browser Plugin Loader 64’.
Publisher:
VIDAL SA  (signed and verified)

MD5:
6bb4d113ea0fb8c873fab2da376481ad

SHA-1:
be38f988a5bd488af4a6dfc8982c4403bcfb60ab

SHA-256:
0ef6222fcc14549410a3d02cbf057b67bf676eca1f902bb46f8dcedb2eaf8ff4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:13:49 AM UTC  (today)

File size:
344.5 KB (352,768 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\vidal menu\vidalmenu.exe

Digital Signature
Signed by:
VIDAL SA

Authority:
GlobalSign nv-sa

Valid from:
3/7/2011 2:31:22 PM

Valid to:
3/7/2014 2:31:18 PM

Subject:
CN=VIDAL SA, O=VIDAL SA, L=Issy-Les-Moulineaux, S=France, C=FR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012E90921ACA

File PE Metadata
Compilation timestamp:
11/12/2012 6:02:36 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:YTUUXfp5xolVeSNC06kBTqEy/3V0G51opgN7PjRowAlI:YT3h5ylVbN36kBTqLBXopiGS

Entry address:
0x1109A

Entry point:
E8, 62, AD, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 38, 9C, 42, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 3C, 9C, 42, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, DE, 07, 00, 00, 85, C0, 75, 06, B8, A0, 9D, 42, 00, C3, 83, C0, 08, C3, E8, CB, 07, 00, 00, 85, C0, 75, 06, B8, A4, 9D, 42, 00, C3, 83, C0, 0C, C3, 8B, FF, 55, 8B, EC, 56, E8, E2, FF, FF, FF, 8B, 4D, 08...
 
[+]

Code size:
136 KB (139,264 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Allin1Convert_8h Browser Plugin Loader 64

Command:
C:\Program Files2\allin1~2\bar\1.bin\8hbrmon64.exe


Scan vidalmenu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.