» whldetct.dll
Overview
Analysis
File Details

whldetct.dll

Whale Communications e-Gap Suite

Whale Communications, Inc.

File name:

whldetct.dll

Publisher:

Whale Communications, a Microsoft subsidiary. (signed by Whale Communications, Inc.)

Product:

Whale Communications e-Gap Suite

Description:

Endpoint Compliance Detection Module

Version:

3, 6, 0, 26

MD5:

2e6e182c9a2bcc4bb15fc4c14ce452f7

SHA-1:

076807587a9009b78d8f44a84412f813927b08fe

SHA-256:

075e6b4d7b2c894bfd94e0d868300e6ed20b07182588edc3674761b56a807aae

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 1:57:11 AM UTC (today)

File size:

269.2 KB (275,680 bytes)

Product version:

3, 6, 0, 26

Original file name:

EndpointCompliance.DLL

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\whale communications\client components\3.1.0\whldetct.dll

Digital Signature

Signed by:

Whale Communications, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/3/2006 7:00:00 PM

Valid to:

11/8/2007 5:59:59 PM

Subject:

CN="Whale Communications, Inc.", OU=e-Gap Suite Publisher, O="Whale Communications, Inc.", L=Fort Lee, S=New Jersey, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

100605B01F731C79478E9DC65C80EF76

Registration

CLSIDs:

{3E68CD98-DD9D-400c-B947-5F9674646BE9}, {5B6B36EC-8A18-4113-A48F-5C4C87630BD7}, {656E5CEE-3585-4c95-AD65-037CB12288F6}, {8D9D76AD-C2F5-48bc-86AD-08DDE6ED3C92}, {961D9D8E-4CE1-405b-BAD1-CF03A2D96F18}, {9E8D6288-6AF2-4720-B80A-43ABFBDC8FE7}

ProgIDs:

EndpointCompliance.ProcessesInfo.1, EndpointCompliance.System.1, EndpointCompliance.Detector.2, EndpointCompliance.PFW.1, EndpointCompliance.AntiVirus.1, EndpointCompliance.WhaleUtils.1, EndpointCompliance.Registry.1, EndpointCompliance.FileSystem.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

11/7/2006 4:34:24 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

3072:ngz5WZavIL+OnFGiQvdHZ2eusxWEPBezHU5BpvjGhbGKlREJi8c/fjmJDM9YgD9n:gzgz7Rs19uaTqhNlrfjGiYm9n

Entry address:

0x1983E

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, E0, E2, 02, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 3C, FA, 02, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 2D, B2, FE, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

6.0545

Developed / compiled with:

Microsoft Visual C++

Code size:

136 KB (139,264 bytes)

Scan whldetct.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.