» nehook.dll
Overview
Analysis
File Details
Programs (1)

nehook.dll

SonicWALL, Inc.

This is installed with SonicWALL SSL-VPN NetExtender.

File name:

nehook.dll

Publisher:

SonicWALL, Inc. (signed and verified)

MD5:

8091a9f71e14269b89d6ac86a11a50c0

SHA-1:

cb8f94710d310bd45ad32a353b1d999ded0a47e0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 6:12:26 AM UTC (today)

File size:

29.4 KB (30,128 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\Program Files\sonicwall\ssl-vpn\netextender\nehook.dll

Digital Signature

Signed by:

SonicWALL, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

3/18/2007 7:00:00 PM

Valid to:

5/13/2009 6:59:59 PM

Subject:

CN="SonicWALL, Inc.", OU=SONICWALL ENGINEERING, O="SonicWALL, Inc.", L=Sunnyvale, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

45BE16C14EF4DDFC493496AF2A972D53

File PE Metadata

Compilation timestamp:

12/12/2007 7:02:36 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

192:lk0RAv+jYHN2ANEyncjWOeyow0a57cL/UkG1:l/a+jINVnNY0rLUkI

Entry address:

0x136B

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 28, 30, 00, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 38, 30, 00, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 15, FF, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 95, FE, FF, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, F1, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, E0, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

2.5411

Developed / compiled with:

Microsoft Visual C++ 6.0

Code size:

4 KB (4,096 bytes)

The file nehook.dll has been discovered within the following program.

SonicWALL SSL-VPN NetExtender by SonicWALL, Inc.

Publisher's description - “SonicWALL NetExtender is a transparent software application for Windows users that enables remote users to securely connect to the remote network. With NetExtender, remote users can securely run any application on the remote network.”

www.sonicwall.com

11% remove it

Scan nehook.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.