home

vnc-p4_6_3-x86_x64_win32.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.realvnc.com.
MD5:
fbd954b559516f5b4d901c2f8292e80b

SHA-1:
70e097e1f115622a33f11f4b6e2a39df95e3021d

SHA-256:
52821b9d398613204a180235b2144229f057a6184ecaafcda1f05ee5a642f003

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 2:29:54 PM UTC  (today)

File size:
5.7 MB (6,000,408 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\vnc-p4_6_3-x86_x64_win32.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:ybe5S9+d6d6JgNGij5bjnvJ+9Nt9v1/DP5PkLpctrPYybSTyVeUFiWJ:z5E6JvijNTE9Nf1C0rPIHQiWJ

Entry address:
0x9B60

Entry point:
34, 7F, 3B, F9, C3, 7C, 0E, 64, A8, 0B, 07, CC, DA, 96, BA, 50, EA, FD, 36, 5F, C7, 0B, EF, B7, F0, D6, 16, 65, E7, E2, 57, C3, B7, 82, 6E, 79, 3B, 63, 40, 41, 40, CD, 76, 75, 18, 2C, A2, 9A, B4, 42, DC, 79, 04, F9, 18, EA, E4, A9, 58, 5E, 5C, 6B, B0, C5, 90, 20, 28, D6, B0, 17, 42, A8, 32, 2A, BE, BB, F6, 96, 1F, 0A, 9D, EE, 90, 99, 27, E6, 4F, CD, D0, 7C, 0A, 71, 10, D1, 94, FE, 35, 36, BE, CB, E8, 38, DA, 77, 4C, 5A, A6, A7, C0, 72, 89, 62, 03, D1, 03, DE, 1C, D2, FE, 58, 82, CC, 95, A3, 6A, CA, 5F, B1...
 
[+]

Entropy:
7.9593  (probably packed)

Code size:
37 KB (37,888 bytes)

The file vnc-p4_6_3-x86_x64_win32.exe has been seen being distributed by the following URL.

https://www.realvnc.com/download/binary/.../

Scan vnc-p4_6_3-x86_x64_win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.