» tvnserver.exe
Overview
Analysis
File Details
Behaviors (2)
Programs (2)

tvnserver.exe

TightVNC

GlavSoft LLC.

It runs as a separate (within the context of its own process) windows Service named “TightVNC Server”. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘tvncontrol’.

File name:

tvnserver.exe

Publisher:

GlavSoft LLC. (signed and verified)

Product:

TightVNC

Description:

TightVNC Server for Windows

Version:

2.0.4.0

MD5:

aaf458cc200326bef602b5339400bf86

SHA-1:

4836d619806039d619221d486dda5fc8b0fdaf9f

SHA-256:

dd47c58a855e4fe2d9afd9912c0661871f0a4ca385d864267f5245480ab8f4d7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 3:28:12 AM UTC (today)

File size:

809.5 KB (828,944 bytes)

Product version:

2.0.4.0

Original file name:

tvnserver.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\tightvnc\tvnserver.exe

Digital Signature

Signed by:

GlavSoft LLC.

Authority:

Thawte, Inc.

Valid from:

3/30/2011 1:00:00 AM

Valid to:

3/30/2012 12:59:59 AM

Subject:

CN=GlavSoft LLC., O=GlavSoft LLC., L=Tomsk, S=Tomsk, C=RU

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

387FDDE484885E7290821D874F860703

File PE Metadata

Compilation timestamp:

8/3/2011 2:18:06 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:/Hwsfthv30UsjD/ANmqFSjQxh3I+JrHHxcZq8mxMD2pJ7Xz:Pfthv3HsIsqMQdJrHHxcZq8mKOP

Entry address:

0x64414

Entry point:

E8, 76, 2D, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 14, 56, 57, 33, FF, 3B, C7, 74, 47, 39, 7D, 08, 75, 1B, E8, 2F, 2E, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 8D, 02, 00, 00, 83, C4, 14, 8B, C6, EB, 29, 39, 7D, 10, 74, E0, 39, 45, 0C, 73, 0E, E8, 0A, 2E, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, D7, 50, FF, 75, 10, FF, 75, 08, E8, 2E, 0F, 00, 00, 83, C4, 0C, 33, C0, 5F, 5E, 5D, C3, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, 88, 15, 48, 00, C3, 8B, FF, 55, 8B, EC, 53, 8B, 5D... 
[+]

Entropy:

6.5424

Code size:

510.5 KB (522,752 bytes)

Service

Display name:

TightVNC Server

Service name:

tvnserver

Type:

Win32OwnProcess

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

tvncontrol

Command:

"C:\Program Files\common files\comodo\tvnserver.exe" -controlservice -slave

The file tvnserver.exe has been discovered within the following programs.

TightVNC by GlavSoft LLC.

TightVNC is a cross-platform open source remote desktop software application that uses and extends VNC's RFB protocol to control another computer's screen remotely.

www.tightvnc.com

11% remove it

TightVNC 1.3.9 by TightVNC Group

About 1% of users remove it

Scan tvnserver.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.