home

vnc-4_1_3-x86_win32.exe

VNC

RealVNC Limited

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
RealVNC Ltd.   (signed by RealVNC Limited)

Product:
VNC

Description:
VNC Setup

MD5:
790856e8ae34f0ac3eb40e031cf7a47a

SHA-1:
fb500f585127ae25c3a5d2153d0740c2ac6fd946

SHA-256:
21d04c62e49ca21daf3f98fa503edb61cee610ebd185e0b34cac4ba44638db19

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 11:20:24 AM UTC  (today)

Scan engine
Detection
Engine version

Kaspersky
not-a-virus:RemoteAdmin.Win32.WinVNC
14.0.0.4482

File size:
724.4 KB (741,744 bytes)

Copyright:
Copyright RealVNC Ltd. 2002-2008

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\vnc-4_1_3-x86_win32.exe

Digital Signature
Signed by:
RealVNC Limited

Authority:
VeriSign, Inc.

Valid from:
9/27/2007 8:00:00 PM

Valid to:
10/31/2010 7:59:59 PM

Subject:
CN=RealVNC Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RealVNC Limited, L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7086D555E6DF75F92C5035AEB7E1DE3F

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:E2UtLvkQcEYXOmVNEfTC21h9vEwhy0wsiqHElPScqKvnY3QyunoYcS5KB:E2UpCEYXVVmbC21hZ8psi7l8YaXas

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9691

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file vnc-4_1_3-x86_win32.exe has been seen being distributed by the following 29 URLs.

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_br&type=PROGRAM&Expires=1481265571&Signature=dmDgFDleBu1H6E6fZB17n2frOqnGukJrRAHTSIl5KSdakQKk~nz3LMPKGPZg1S1Bc~lU3oICKmByOboa2AQmb2L7QIgcp4yR3P0Hrb2rGOD~nptii2PQYFvRTCK3RHynIzlK6J6JLWHikOYV1CZ-eAJHRS4ig4y4joS3W4Q3WjE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vnc-4_1_3-x86_win32.exe

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_br&type=PROGRAM&Expires=1481431922&Signature=h2eovM-6o90FX5Svldw6FIcgWRQX79Tpxe0ggP8yfRyEdY3Kvqq~WuU3GkJ3TUwAhQfLjvh0FNbuwYIqOsR5hXhw4nddlx5LhcFTXkRAty3RsKjWoPDN7kAxR52~Q9PUh31uakOxgbH6mSwZY5BS~iblmjfCCc9dpQgnmNI93gc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vnc-4_1_3-x86_win32.exe

http://cs07.superfiles.me/f/0/1460829115/24219055/0/.../vnc-4_1_3-x86_win32-spaces.ru.exe

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_it&type=PROGRAM&Expires=1475699639&Signature=LbpzZAc-Z1UtCzefA8v4Bgc-vR19JBjU4CK~ZBfe2b5wIZtzS5VbfaSiICxSgLyORqcZCxTfa9G5JofXL3N9Mat2B25CprDZPeRAP8NZgj1i0v3ZNtK7vSobDmYa3l3OBzFuXJFtAuTCYPchClworouWv-rxD3ySdphkhb~NXWE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vnc-4_1_3-x86_win32.exe

https://mystores.genpt.com/IncludeFiles/.../,DanaInfo=mystoreshelp.genpt.net vnc_viewer_setup.exe

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_it&type=PROGRAM&Expires=1435434538&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UxKmz-O8wkXHTPb0e9m-apI2dKbLAs0wTO2vRklGcg34SL~BB7k8mEkM0PfJ~AvxUICCgtKp3~IGZlVMuB-WOXTZ1fBfsaqUL7ta7l6aMUOW6zAc4nrAnj3GkFW8uUEjfFCfTpaqQ9e~2sXGx1todSDV2728XWU70HjIkyEGIyo_&filename=vnc-4_1_3-x86_win32.exe

http://storage3.dobreprogramy.pl/.../vnc-4_1_3-x86_win32(dobreprogramy.pl).exe

http://downloads.ziddu.com/downloadfiles/.../vnc-4_1_3-x86_win32.exe

http://filehippo.com/download/file/.../

http://parametrosistemas.com.br/.../vnc-4_1_3-x86_win32.exe

http://download1859.mediafire.com/mf3a16eu8tzg/.../vnc-4_1_3-x86_win32.exe

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_br&type=PROGRAM&Expires=1475714659&Signature=HXMY1tniCoOcx-P8D8GCYhh1Djs2e38UbteIs3GSAvfZAl4XQjqTZ9fPXOC-uCBAuSGWlf8H5sILwvCS~HkpiA8iyn4IwD8o4phFGALV6Ozeg2-IIaZ0avWAjEByMkS2SOzEodZhUeISyYyVCCwhljmG6Bw1DX13CwGCmO2K-uI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vnc-4_1_3-x86_win32.exe

https://mg.mail.yahoo.com/ya/.../NgAALpsTIl7GgH9SU88yFY&fid=Inbox&pid=2&clean=0&appid=YahooMailNeo&ymreqid=ddff5915-1ae3-6eb1-015e-480044010000

temp:vnc-4_1_3-x86_win32.exe

https://archive.realvnc.com/download/binary/.../

http://realvnc.com/.../download.cgi

http://softonet.pl/wyslij6131-2.html

http://www.dmasoftlab.com/cont/.../vnc-4_1_3-x86_win32.exe

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_br&type=PROGRAM&Expires=1430351154&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=H6xrkBJMJij9zarSVmG1Ebw7vIQnLq1lzCnSCM5K9Me6KsBBuK~tf2HX03QDr5~a7F7-9N8DVSUuRNDN0BWlMFVLiAVPnYD5APGkeVIddH4vexM3qmXIzZJI5cRHymsQ2OhQe3n8aRg8WrXuCgkQ5qgNRzTj~cE-OAT4pVtkFfI_&filename=vnc-4_1_3-x86_win32.exe

ftp://laiya/AllOS/.../vnc-4_1_3-x86_win32.exe

http://gsf-cf.softonic.com/fb5/00f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=6860&instance=softonic_br&type=PROGRAM&Expires=1436317925&Signature=Nrn1U~mKyCzzmjkI~uT5vMHU9pJKo9s1yHp28baPQ6rqYQiPUxB3WS5kq4v-nsEWdWsjwxdgKOA61fvm~eqENQHA~B2z4u3RJqFAL4reVbr4JH0hAj3M85SA5VZSVH6uuNH1EbCrm1Q8Dvu8pc2OACSCODSeQmTqmOvhNw0Z8f4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=vnc-4_1_3-x86_win32.exe

http://www.parametrosistemas.com.br/.../vnc-4_1_3-x86_win32.exe

http://download.porciello.com/.../vnc-4_1_3-x86_win32.exe

http://dls.posabilities.com/vnc.exe

http://www.realvnc.com/download/binary/.../

https://www.realvnc.com/download/binary/.../

http://www.filehippo.com/download/file/.../

http://dl.filehorse.com/win/file-transfer-and-networking/.../RealVNC-4.1.3.exe

http://www.realvnc.com/.../download.cgi

Scan vnc-4_1_3-x86_win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.