home

vf_shex.dll

Viewfinity Agent

Viewfinity Inc.

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “VfAgentShellContextMenuHandler”.
Publisher:
Viewfinity  (signed by Viewfinity Inc.)

Product:
Viewfinity Agent

Description:
Viewfinity Shell Extension

Version:
4.5.33.445

MD5:
ba4b4afc01368fa0cc95b24e733c5ef2

SHA-1:
fc2a9f57c5f9d37b21614b785077c18a49f418c3

SHA-256:
fd43fa61cb3dbc4e33c38eca0930ad00357c67d4df945bb30d8cfa260f106017

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/25/2026 10:11:30 AM UTC  (today)

File size:
644.1 KB (659,528 bytes)

Product version:
4.5.33.445

Copyright:
(c) 2007-2013 Viewfinity, Inc.

Original file name:
vf_shex.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\viewfinity\agent\x32\vf_shex.dll

Digital Signature
Signed by:
Viewfinity Inc.

Authority:
GlobalSign nv-sa

Valid from:
5/11/2012 1:12:16 PM

Valid to:
9/2/2014 9:31:46 AM

Subject:
CN=Viewfinity Inc., O=Viewfinity Inc., L=Waltham, S=MA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112154BA7E6ED89A0AE5E8A69A1CD80E7CE5

Registration
CLSIDs:
{09B6EED7-2B3C-43B2-AD9E-D4BDF10CA4E5}, {AA5B461C-6663-41F8-BDD4-67A7A09B2F3D}, {AC887FCC-4DE9-419D-AE17-6460A5CC501F}, {CA7D49C4-9EE1-4DC3-A7E1-C2CF9A59237B}

ProgIDs:
CvfIconOverlayHandler.CvfIconOverla.1.0, CvfFilePropPage.CvfFilePropPage.1.0, Viewfinity.ShellContextMenu.1, CvfToolsFolder.CvfToolsFolder.1.0

COM registered:
Yes

File PE Metadata
Compilation timestamp:
11/28/2013 8:33:30 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:7cP1J+4HfrXDVAKvC2plA3x9INE+X0qsw8vtpVQrwmjNg9:YtJrHfnTvW3jINE+X0qsw8vtpVQrwmjo

Entry address:
0x2A966

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 92, 77, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 8B, FF, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, ED, A9, 02, 10, 6A, 00, FF, 75, 0C, FF, 75, F8, FF...
 
[+]

Entropy:
6.2073

Code size:
262 KB (268,288 bytes)

Context Menu Handler
Display name:
VfAgentShellContextMenuHandler

CLSID:
{AC887FCC-4DE9-419D-AE17-6460A5CC501F}

CLSID name:
CvfShellContextMenu Object


Scan vf_shex.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.