home

whlwmidetect.exe

Whale Communications Intelligent Application Gateway 2007

Whale Communications, Inc.

Publisher:
Whale Communications, a Microsoft subsidiary  (signed by Whale Communications, Inc.)

Product:
Whale Communications Intelligent Application Gateway 2007

Description:
WMI Detection Module

Version:
3, 7, 230, 0

MD5:
e5402ec64296c8169632d8c9c4a2e1a8

SHA-1:
c1867a28498b4656c01776f433322ea30b5c295f

SHA-256:
38f7da0231cf13555740f6a27bed945751d8297da5fb7e55056cb7a8b75df64b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:36:23 AM UTC  (today)

File size:
102.1 KB (104,600 bytes)

Product version:
3, 7, 100, 0

Copyright:
© 2007 Whale Communications, a Microsoft subsidiary. All rights reserved.

Original file name:
WmiDetection.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\Program Files\whale communications\client components\3.1.0\whlwmidetect.exe

Digital Signature
Signed by:
Whale Communications, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/15/2008 5:00:00 PM

Valid to:
12/3/2009 4:59:59 PM

Subject:
CN="Whale Communications, Inc.", OU=e-Gap Suite Publisher, O="Whale Communications, Inc.", L=Redmond, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
1923E22E50FD272DDE5286AC065DB7C8

File PE Metadata
Compilation timestamp:
6/23/2008 9:54:20 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:mkzUxLW9Cy2lerDX/q4fU6VVHydvKnqFmayL7Oa+FkhI:hzUxS9+4rrUCQvKnkmayL7Oa6km

Entry address:
0xB72E

Entry point:
E8, 02, 0A, 00, 00, E9, 40, FD, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, 5C, 51, 41, 00, 75, 02, F3, C3, E9, 73, 0A, 00, 00, CC, CC, CC, CC, CC, CC, FF, 25, 58, 12, 40, 00, CC, CC, CC, CC, CC, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 5C, 51, 41, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, CC, CC, CC, CC, CC, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 5C...
 
[+]

Entropy:
6.3904

Code size:
77 KB (78,848 bytes)

Scan whlwmidetect.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.