Please ensure you understand and agree with our data protection policy before using this site. Review Policy
Analyze suspicious files to detect malware and automatically share them with our team. You can compress your file into a zip archive (if needed, we use the password "infected" to extract before checking).
Checked: | 2023-09-18 14:06:15 |
MD5: | 7fc7ddf56dc4ac104e9ec7412cc98b12 |
SHA1: | 56b9be8452afe219257cb1f35d419422dcbd161d |
SHA256: | 263c1cd12484681a76ec71417dbb298a918741e17e25558528658cf038457f02 |
SHA512: | 29a56043b476dc68ce01640ad846ca206dc652a2dbbd6718a47dc351b4116de533ff06a932cf4017424130403891bf098aeffda7784f88fb66da206819dcf2f7 |
Imphash: | 32e3f2e80952c9e40e1c0489377e6e46 |
File Size: | 87344 bytes |
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Symantec Class 3 SHA256 Code Signing CA | uvnc bvba (BE) |
VeriSign Class 3 Public Primary Certification Authority - G5 | Symantec Corporation (US) |
Verification | OK |
CompanyName | UltraVNC |
FileDescription | VNC hooks DLL for Win32 |
FileVersion | 1.1.0.2 |
InternalName | VNCHooks |
LegalCopyright | Copyright (C) 2016 UltraVNC, Copyright RealVNC Ltd.© 2002, AT&T Research Labs Cambridge© 1996-2001 |
OriginalFilename | VNCHooks.dll |
ProductName | UltraVNC - VNCHooks |
ProductVersion | 1.1.0.2 |
Translation | 0x0809 0x04b0 |
Image Base: | 0x10000000 |
Entry Point: | 0x100025c9 |
Compilation: | 2016-10-26 21:10:18 |
Checksum: | 0x0001ed30 (Actual: 0x0001ed30) |
OS Version: | 6.0 |
PDB Path: | C:\Users\rudi\Desktop\UltraVNC_1212\winvnc\Release\vnchooks.pdb |
PEiD: | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows |
Sign: | OK |
Sections: | 5 |
Imports: | KERNEL32, USER32, GDI32, ADVAPI32, |
Exports: | 5 |
Resources: | 2 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x0000b7c4 | 0x0000b800 | 9c4c735460a305539c9c4cb6a9191144 | 6.70 |
.rdata | 0x0000d000 | 0x000054a2 | 0x00005600 | 1bebdc87d6cb42d4ceb248ce8c8ceb06 | 4.73 |
.data | 0x00013000 | 0x00003020 | 0x00001200 | 5b9453507d8b4aa1509c03c47366da94 | 3.37 |
.rsrc | 0x00017000 | 0x00000598 | 0x00000600 | 62f436ff03a977e0eb1190a2e1b13219 | 4.00 |
.reloc | 0x00018000 | 0x00000fe0 | 0x00001000 | 05fc3ff9d0af36fcf3fe53277ab4163e | 6.56 |