vmliteworkstationsetup.exe

VMLite Workstation Installer

Remotesoft, Inc.

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
VMLite, Inc.  (signed by Remotesoft, Inc.)

Product:
VMLite Workstation Installer

Version:
3.2.6.r28941

MD5:
e1ba7056410badd1ee40b260ded41c86

SHA-1:
920e6cc3de5c409e8dbf7687f93b9e6786845e2e

SHA-256:
82e8113594b2d8a4e9f7950839e574a9a16624dbef7721ed67630cb8d8aca26a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:20:12 PM UTC  (a few moments ago)

File size:
65.1 MB (68,253,288 bytes)

Product version:
3.2.6.r28941

Copyright:
Copyright (C) 2010 VMLite, Inc.

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
7/1/2010 1:37:33 AM

Valid to:
7/2/2011 1:37:29 AM

Subject:
CN="Remotesoft, Inc.", O="Remotesoft, Inc.", L=Fremont, S=CA, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001298B702EB5

File PE Metadata
Compilation timestamp:
8/15/2010 12:57:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:BAhyTadOT6UQK/sv/5tAVmykdWnXkksPUr1eosY5F3X:BAhyTasTkvvAVmyAWUksK1xsWn

Entry address:
0x1B05

Entry point:
E8, 92, 29, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 68, F0, 40, 00, 89, 0D, 64, F0, 40, 00, 89, 15, 60, F0, 40, 00, 89, 1D, 5C, F0, 40, 00, 89, 35, 58, F0, 40, 00, 89, 3D, 54, F0, 40, 00, 66, 8C, 15, 80, F0, 40, 00, 66, 8C, 0D, 74, F0, 40, 00, 66, 8C, 1D, 50, F0, 40, 00, 66, 8C, 05, 4C, F0, 40, 00, 66, 8C, 25, 48, F0, 40, 00, 66, 8C, 2D, 44, F0, 40, 00, 9C, 8F, 05, 78, F0, 40, 00, 8B, 45, 00, A3, 6C, F0, 40, 00, 8B, 45, 04, A3, 70, F0, 40, 00, 8D, 45, 08, A3, 7C, F0, 40...
 
[+]

Code size:
39 KB (39,936 bytes)

The file vmliteworkstationsetup.exe has been seen being distributed by the following 10 URLs.

http://gsf-cf.softonic.com/920/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=89566&instance=softonic_es&type=PROGRAM&Expires=1475056791&Signature=WwMMGM81mQCG2ALm4Nw3RYe-llXs4wQkDfMwhxRLaqVZDmmt1FRpdd69KkHoY~WFCWYd1sUV3IDey7gaUmuWQ0Quk1QYkJ3sdsgAtbcEQwd-Bd~iaUcYrcJrmX7UrTMOz1CgT65ns5cyBkVMQkJB1aCwgBwRLJivJgA36~ynHPE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VMLiteWorkstationSetup.exe

http://gsf-cf.softonic.com/920/e6c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=89566&instance=softonic_fr&type=PROGRAM&Expires=1477555518&Signature=A6GM36vPWld-xPhDutGzKkROXUtzWHfLRgCsCDBDw20ctVX6NWJ1ixZvQIfsgHlszqWVkogX9TNH8UPHqOPN1IAzS9HgSTspVAeudxLSdbX6kAU7b8crtp~YuSIoZyfJUPIbb4cAhrp7Z9Q~nRSHx0xQhBkUslQR9rU-3VCDHP8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=VMLiteWorkstationSetup.exe

https://onedrive.live.com/download.aspx?cid=19513C7F3F2AAB2C&resid=19513C7F3F2AAB2C!112&ithint=.exe

Scan vmliteworkstationsetup.exe - Powered by Reason Core Security