Gridinsoft Logo
File Icon

The winvnc_SC.exe (UltraVNC Server) File Analysis

Updated 2 days ago
Checked by Malware Check
winvnc_SC.exe

Technical Analysis

File Name winvnc_SC.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.221.174
Database Version 2025-07-23 02:00:25 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
4,588,368
File Size (bytes)
2025-07-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
33191bf4a5bc52a2f33330c029bb13ca
SHA1
edc296a65bead76f42ad7576a794455f1f377b76
SHA256
55989bd1413121e8ac91e4cc8ed326bc4551da7071f0c25ef27fc595650bf811
SHA512
c31f3a622928d4dad9f348671a7d78f55864881d552342cd4070c22a776e0e5ece0a832c4874d0ddb74487441c445126624e14610a3e6858d571c300d4cd8d94
ImpHash
c5556c37f9a6330b574d99e6f8abef8e

PE Analysis

Basic Information

▼
Icon
Hash: f9701898cc62ca8fa2431d1cbb7a0d91
Fuzzy: 8cf551329b1269d3156746ccffa24a2f
dHash: d0cc8ecccc8ef0d4
Image Base 0x00400000
Entry Point 0x0054570b
Compilation Time 2025-06-22 14:49:38
Checksum 0x0046b43b (Actual: 0x0046b43b)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\Users\rudi\Desktop\git_ultravnc\winvnc\SC_20\winvnc.pdb
Digital Signature OK
Imports 15 libraries
Exports 0 functions
Resources 117 Resources
Sections 5 Sections

Version Information

▼
Comments UltraVNC - Remote Control for all
CompanyName uvnc bv
FileDescription UltraVNC Server
FileVersion 1.6.4.0
InternalName WinVNC.exe
LegalCopyright Copyright © 2002-2025 UltraVNC Team Members. All Rights Reserved.
OriginalFilename WinVNC.exe
ProductName UltraVNC Server
ProductVersion 1.6.4.0
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,581,752 bytes 1,582,080 bytes 6.71 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8BE92C6C5FA04CA7389120D17B0302F0
.rdata 0x00184000 485,298 bytes 485,376 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 93D18D83AB3FCF53384FE9005D0C8ED0
.data 0x001fb000 589,892 bytes 8,192 bytes 3.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7BDFB5315482D68A386F52E773F6ECC4
.rsrc 0x0028c000 2,451,048 bytes 2,451,456 bytes 6.60 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 66D1D06198B730FB2C5968E82CB8AC86
.reloc 0x004e3000 48,308 bytes 48,640 bytes 6.73 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 63E66E0A53670E0432F51262533EFE15
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 117 (2,444,627 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 23 46 bytes
0%
DLL 1 259,016 bytes
10.6%
ENCRYPTIONDLL 1 1,364,832 bytes
55.8%
JAVAARCHIVE 2 147,884 bytes
6%
RT_CURSOR 19 32,276 bytes
1.3%
RT_BITMAP 6 16,600 bytes
0.7%
RT_ICON 18 593,872 bytes
24.3%
RT_MENU 2 918 bytes
0%
RT_DIALOG 23 18,716 bytes
0.8%
RT_STRING 8 8,094 bytes
0.3%
RT_GROUP_CURSOR 10 326 bytes
0%
RT_GROUP_ICON 2 264 bytes
0%
RT_VERSION 1 884 bytes
0%
RT_MANIFEST 1 899 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product UltraVNC Server
Description UltraVNC Server
File Version 1.6.4.0
Original Name WinVNC.exe
Signing Date 02:49 PM 06/22/2025 (32 days ago)
Verification Status Signed
Signers uvnc bvba; Sectigo Public Code Signing CA R36; Sectigo Public Code Signing Root R46; Sectigo (AAA)
Counter Signers Sectigo Public Time Stamping Signer R36; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Internal Name WinVNC.exe
Copyright Copyright © 2002-2025 UltraVNC Team Members. All Rights Reserved.
Certificate Chain Summary
Sectigo Public Code Signing Root R46 #1 Primary
Validity Period: 2021-05-25 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
uvnc bvba #2 Chain
Validity Period: 2022-09-23 00:00:00 → 2025-09-22 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 4C 03 67 0A 31 E6 2B 9F AC B9 D2 D3 70 39 BD 07
Sectigo Public Code Signing CA R36 #3 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 62 1D 6D 0C 52 01 9E 3B 90 79 15 20 89 21 1C 0A
Sectigo RSA Time Stamping Signer #4 #4 Chain
Validity Period: 2023-05-03 00:00:00 → 2034-08-02 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 4C 25 E1 7C A0 6D 27 A8 65 E2 3B D9 1D 22 D4
Sectigo RSA Time Stamping CA #5 Chain
Validity Period: 2019-05-02 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9
DigiCert SHA2 High Assurance Code Signing CA #6 Chain
Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 0B 7E 10 90 3C 38 49 0F FA 2F 67 9A 87 A1 A7 B9
Symantec SHA256 TimeStamping CA #7 Chain
Validity Period: 2016-01-12 00:00:00 → 2031-01-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
Symantec SHA256 TimeStamping Signer - G3 #8 Chain
Validity Period: 2017-12-23 00:00:00 → 2029-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12
Sectigo Public Time Stamping Signer R36 #9 Chain
Validity Period: 2025-03-27 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 24
Sectigo Public Time Stamping CA R36 #10 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Root R46 #11 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware