home

setup.exe

InWise Internet Company do Brasil S.A.

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Vono by Vono. The file has been seen being downloaded from softfone.vono.net.br and multiple other hosts.
Publisher:
Vono  (signed by InWise Internet Company do Brasil S.A.)

Product:
Vono

Version:
4.6.0000.0000 pt-BR RELEASE

MD5:
b611aad7a2eace434be18b07f87b75bf

SHA-1:
1ffb636fb7747051793aedd463037be47de55edd

SHA-256:
b1d82bdfeffded001077fcf40a6e0c4e3dc9569c2eea2bdff702cff79e562887

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:42:31 AM UTC  (today)

File size:
8.3 MB (8,699,064 bytes)

Product version:
4.6.0000.0000 pt-BR RELEASE

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\application data\appdata\application data\appdata\application data\appdata\application data\appdata\application data\vono\vono\setup\.iap{0000.0000.0000.0001}.4.6.0000.0000\setup.exe

Digital Signature
Signed by:
InWise Internet Company do Brasil S.A.

Authority:
TrustSign Certificadora Digital

Valid from:
6/30/2013 9:00:00 PM

Valid to:
7/1/2014 8:59:59 PM

Subject:
CN=InWise Internet Company do Brasil S.A., O=InWise Internet Company do Brasil S.A., STREET="Av Tancredo Neves, 1283", L=Salvador, S=Bahia, PostalCode=41820021, C=BR

Issuer:
CN=TrustSign BR Certification Authority (Code Signing), OU=Security Dept., O=TrustSign Certificadora Digital, C=BR

Serial number:
00DC903522D192DFF02B2600461098B7AC

File PE Metadata
Compilation timestamp:
11/13/2013 4:30:55 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:r92wzcVucog8DySfqI4O/963wGl7HDct1eToMguDdUqIeW+F/SUXOZT6ug4sS:BjAVV8DySl4O/9MlzY3e8PuDKqbTFqUk

Entry address:
0xCA4350

Entry point:
60, BE, 00, A0, 86, 00, 8D, BE, 00, 70, B9, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Packer / compiler:
UPX 2.90LZMA

Code size:
8.2 MB (8,630,272 bytes)

Program Uninstaller
Program name:
Vono

Display publisher:
Vono

Display version:
4.6.0000.0000

Uninstall string:
C:\PROGRA~3\Vono\Vono\Setup\.IAP{0000.0000.0000.0001}.4.6.0000.0000\Setup.exe /uninstall=true


The file setup.exe has been seen being distributed by the following 2 URLs.

http://softfone.vono.net.br/APP/0000/0000/RELEASE/.../Vono 4.6 Setup.exe

http://softfone.vono.net.br/APP/0000/0000/.../LatestVersion

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.