» zoommonitor.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

zoommonitor.exe

Personal VoIP Gateway

Zoom Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ZoomMonitor.exe’. This is installed with Zoom Phone Adaptor.

File name:

zoommonitor.exe

Publisher:

Zoom Technologies, Inc. (signed and verified)

Product:

Personal VoIP Gateway

Description:

VoipMonitor MFC Application

Version:

1.00.00

MD5:

d07337521c9b3e2b1e6005c3d85b16b6

SHA-1:

545ed52c8f39926f005b62dff5535dd95eda5ae6

SHA-256:

3b15ed5b8459a73d436af0d26889485e05198ec892832000b3b5baf0575da51c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 12:17:02 PM UTC (today)

File size:

1.1 MB (1,159,184 bytes)

Product version:

1.00.00

Original file name:

VoipMonitor.EXE

File type:

Executable application (Win64 EXE)

Language:

English (United States)

Common path:

C:\Program Files\zoom\zoom phone adaptor\zoommonitor.exe

Digital Signature

Signed by:

Zoom Technologies, Inc.

Authority:

VeriSign, Inc.

Valid from:

12/18/2007 4:00:00 PM

Valid to:

12/18/2008 3:59:59 PM

Subject:

CN="Zoom Technologies, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Zoom Technologies, Inc.", L=Boston, S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

466D3817D77C8779E153021075A71D0D

File PE Metadata

Compilation timestamp:

1/21/2008 6:33:22 PM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:xj882/Uo2rAGibof37CDgvrZOUOuwIe0Xh4tt:l8TUosAGBUgv9O5CVXh4tt

Entry address:

0x8A6A0

Entry point:

48, 83, EC, 28, E8, C7, EC, 00, 00, 48, 83, C4, 28, E9, FE, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 66, 90, 66, 66, 66, 90, 66, 90, 48, 8B, C1, 49, 83, F8, 08, 72, 53, 0F, B6, D2, 49, B9, 01, 01, 01, 01, 01, 01, 01, 01, 49, 0F, AF, D1, 49, 83, F8, 40, 72, 1E, 48, F7, D9, 83, E1, 07, 74, 06, 4C, 2B, C1, 48, 89, 10, 48, 03, C8, 4D, 8B, C8, 49, 83, E0, 3F, 49, C1, E9, 06, 75, 39, 4D, 8B, C8, 49, 83, E0, 07, 49, C1, E9, 03, 74, 11, 66, 66, 66, 90, 90... 
[+]

Entropy:

6.3326

Code size:

654.5 KB (670,208 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

ZoomMonitor.exe

Command:

C:\Program Files\zoom\zoom phone adaptor\zoommonitor.exe

The file zoommonitor.exe has been discovered within the following program.

Zoom Phone Adaptor by ZOOM Corporation

About 6% of users remove it

Scan zoommonitor.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.