The VNCHooks File Analysis
| Online Virus Checker | v.1.0.139.174 |
| DB Version: | 2023-09-18 16:06:10 |
The VNCHooks Is Safe File
| File | VNCHooks |
| Checked | 2023-09-18 14:06:15 |
| MD5 | 7fc7ddf56dc4ac104e9ec7412cc98b12 |
| SHA1 | 56b9be8452afe219257cb1f35d419422dcbd161d |
| SHA256 | 263c1cd12484681a76ec71417dbb298a918741e17e25558528658cf038457f02 |
| SHA512 | 29a56043b476dc68ce01640ad846ca206dc652a2dbbd6718a47dc351b4116de533ff06a932cf4017424130403891bf098aeffda7784f88fb66da206819dcf2f7 |
| Imphash | 32e3f2e80952c9e40e1c0489377e6e46 |
| File Size | 87344 bytes |
Remember: This is Result of Online Virus Scanner
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Signers
| Symantec Class 3 SHA256 Code Signing CA | uvnc bvba (BE) |
| VeriSign Class 3 Public Primary Certification Authority - G5 | Symantec Corporation (US) |
| Verification | OK |
File Version Information
| CompanyName | UltraVNC |
| FileDescription | VNC hooks DLL for Win32 |
| FileVersion | 1.1.0.2 |
| InternalName | VNCHooks |
| LegalCopyright | Copyright (C) 2016 UltraVNC, Copyright RealVNC Ltd.© 2002, AT&T Research Labs Cambridge© 1996-2001 |
| OriginalFilename | VNCHooks.dll |
| ProductName | UltraVNC - VNCHooks |
| ProductVersion | 1.1.0.2 |
| Translation | 0x0809 0x04b0 |
Portable Executable Info
| Image Base: | 0x10000000 |
| Entry Point: | 0x100025c9 |
| Compilation: | 2016-10-26 21:10:18 |
| Checksum: | 0x0001ed30 (Actual: 0x0001ed30) |
| OS Version: | 6.0 |
| PDB Path: | C:\Users\rudi\Desktop\UltraVNC_1212\winvnc\Release\vnchooks.pdb |
| PEiD: | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows |
| Sign: | OK |
| Sections: | 5 |
| Imports: | KERNEL32, USER32, GDI32, ADVAPI32, |
| Exports: | 5 |
| Resources: | 2 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0000b7c4 | 0x0000b800 | 9c4c735460a305539c9c4cb6a9191144 | 6.70 |
| .rdata | 0x0000d000 | 0x000054a2 | 0x00005600 | 1bebdc87d6cb42d4ceb248ce8c8ceb06 | 4.73 |
| .data | 0x00013000 | 0x00003020 | 0x00001200 | 5b9453507d8b4aa1509c03c47366da94 | 3.37 |
| .rsrc | 0x00017000 | 0x00000598 | 0x00000600 | 62f436ff03a977e0eb1190a2e1b13219 | 4.00 |
| .reloc | 0x00018000 | 0x00000fe0 | 0x00001000 | 05fc3ff9d0af36fcf3fe53277ab4163e | 6.56 |
