» VHook.dll
Overview
Analysis
File Details

VHook.dll

VHook

VNG Corp

File name:

VHook.dll

Publisher:

VNG Corporation (signed by VNG Corp)

Product:

VHook

Description:

VHook for VAuto

Version:

0, 2, 1, 62

MD5:

d197329374dbff999de7db6b1bcdd648

SHA-1:

b8575607b8778e3e57332f7b29137693ae01e97f

SHA-256:

9326c37da7655464cdf1c59dffa1613b3c0c08a571bda1d2cfc81d8d18be986a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 6:48:34 AM UTC (today)

File size:

2.2 MB (2,339,512 bytes)

Product version:

0, 2, 1, 62

Original file name:

VHook.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\vng\volam\vhook.dll

Digital Signature

Signed by:

VNG Corp

Authority:

VeriSign, Inc.

Valid from:

8/21/2013 8:00:00 PM

Valid to:

9/21/2015 7:59:59 PM

Subject:

CN=VNG Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VNG Corp, L=Ho Chi Minh, S=Ho Chi Minh, C=VN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

62BA478BF71543D3246E54F7DBDAEA8B

File PE Metadata

Compilation timestamp:

6/16/2014 1:29:00 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:ToiWpMjw1Vu0gIEMhSKSqPq4p0aGp772T/thZczPJw:MiLUfudFMUX/aGpf2zthaPJw

Entry address:

0x87FB5F

Entry point:

E8, E8, 4F, FF, FF, BF, 54, 84, 07, 3A, D9, 89, 77, 4C, D7, 59, BA, 4D, 31, 16, A4, 36, 27, 55, 85, 39, 89, 6A, EC, 90, F6, 80, D9, 5C, 6D, BC, E6, 32, 96, 5D, 4D, 62, 30, 79, D4, 44, CE, 82, 42, CA, 3C, CF, CF, AE, 71, 91, DE, 1A, 74, 52, FD, E3, 31, 3D, A3, 6A, 5F, 2F, 1C, 22, 1A, E4, C4, 57, 20, 5A, 74, B9, 4C, 39, 96, F6, A8, 83, AF, 78, 31, 1D, FC, A7, 64, D5, 5C, 8D, D0, 2A, E2, 48, 9C, E6, 07, C6, AD, 7B, B2, C0, 49, 7E, 0E, 4E, 11, 4D, 03, C1, A8, CD, 9A, 81, FB, 8C, CA, D3, 67, 09, 9D, 64, 39, 29... 
[+]

Entropy:

7.8624 (probably packed)

Code size:

680 KB (696,320 bytes)

Scan VHook.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.