How to remove vnchooks.dll
- File Details
- Overview
- Analysis
vnchooks.dll
The module vnchooks.dll has been detected as Risk.RemoteAdmin
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7ba3854061a8f2dd43e67095c5d0ab1a |
| Size: |
58 KB |
| First Published: |
2017-06-01 02:14:52 (7 years ago) |
| Latest Published: |
2019-11-09 16:02:37 (5 years ago) |
| Status: |
Risk.RemoteAdmin (on last analysis) |
|
| Analysis Date: |
2019-11-09 16:02:37 (5 years ago) |
Overview
| %temp%\7zs53d9.tmp |
| %temp%\7zse6c6.tmp |
| %temp%\7zs88d7.tmp |
| %temp%\7zs39cd.tmp |
| %temp%\7zsa9ea.tmp |
| %temp%\7zscabd.tmp |
| %temp%\7zs85d5.tmp |
| %temp%\7zs69ff.tmp |
| %temp%\7zs10b9.tmp |
| %temp%\7zs5337.tmp |
|
83.6% |
|
|
7.3% |
|
|
5.5% |
|
|
1.8% |
|
|
1.8% |
|
| Windows 7 |
61.1% |
|
| Windows 10 |
31.5% |
|
| Windows Server 2012 R2 |
7.4% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00002203 |
| Name |
Size of data |
MD5 |
| .text |
20480 |
6ceb2d8874a62d65a51060df6579b2b5 |
| .rdata |
4096 |
06ddec8d052bfd640153fe1730024e08 |
| .data |
12288 |
3c8ae5b0d6671b01460a21f906c58f24 |
| .SharedD |
4096 |
620f0b67a91f7f74151bc5be745b7110 |
| .rsrc |
4096 |
77e43f25553be85d7a4edf66b159ee21 |
| .reloc |
4096 |
115353b881d9c4d2bc1a5883cf84b180 |
