home

vmware-viewagent-direct-connection-x86_64-e.x.p-3521719.exe

View Agent Direct-Connection Plugin

VMware, Inc.

This is a setup and installation application. The file has been seen being downloaded from arch-perf.nvidia.com.
Publisher:
VMware, Inc.  (signed and verified)

Product:
View Agent Direct-Connection Plugin

Description:
VMware installation launcher

Version:
7.0.0.3521719

MD5:
6e5cae72e3abd19855bd332f3c98c604

SHA-1:
6651d6e7d79ee2023e05ccc5b8a5c34b4106bde0

SHA-256:
4ca8901e8ba837af6d7a3942a6a0300ccb81e8c9544e1f926bff0aecc152d83c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 5:53:36 AM UTC  (today)

File size:
11.6 MB (12,176,608 bytes)

Product version:
7.0.0.3521719

Copyright:
Copyright © 1998-2016 VMware, Inc.

Original file name:
setup.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\vmware-viewagent-direct-connection-x86_64-e.x.p-3521719.exe

Digital Signature
Signed by:
VMware, Inc.

Authority:
Symantec Corporation

Valid from:
7/24/2015 5:30:00 AM

Valid to:
8/23/2018 5:29:59 AM

Subject:
CN="VMware, Inc.", O="VMware, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
653BC218FF16E19A738DC0F0B126DE61

File PE Metadata
Compilation timestamp:
1/23/2016 12:40:53 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:D3LDjVJADmmxL2WEoCZi2Sc1uGTSZvjWpZTlb/l1Ha:DD/WEIL29GaTp6

Entry address:
0x11D4

Entry point:
48, 83, EC, 28, E8, E7, 15, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 2B, 83, 78, 18, 04, 75, 25, 8B, 40, 20, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 06, E8, 57, 16, 00, 00, CC, 33, C0, 48, 83, C4, 28, C3, CC, CC, CC, 48, 83, EC, 28, 48, 8D, 0D, B1, FF, FF, FF, FF, 15, CB, 4D, 06, 00, 33, C0, 48, 83, C4, 28, C3, 40, 53, 48, 83, EC, 20, 8B, D9, E8, 03, 06, 00, 00, 8B, CB, E8...
 
[+]

Entropy:
7.6073

Code size:
401.5 KB (411,136 bytes)

The file vmware-viewagent-direct-connection-x86_64-e.x.p-3521719.exe has been seen being distributed by the following URL.

https://arch-perf.nvidia.com/home/vgpu/public_html/VMware-ESX/.../VMware-viewagent-direct-connection-x86_64-e.x.p-3521719.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.