» whook_x64.dll
Overview
Analysis
File Details
Programs (1)

whook_x64.dll

WWHook

Deskperience Software

This is installed with WordCaptureX Demo.

File name:

whook_x64.dll

Publisher:

Deskperience (signed by Deskperience Software)

Product:

WWHook

Description:

WHook

Version:

5, 0, 1701, 0

MD5:

27958a0de8ebb8a6de29e6b8b626b21b

SHA-1:

9e6bda0e1af22515a3128ccca213be7cf2444f9b

SHA-256:

6a6ce4373cf3d599d15c6a23eab6036c0d73840c87ab6af5b181124c66fb3c48

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 10:21:08 PM UTC (today)

File size:

110.3 KB (112,960 bytes)

Product version:

5, 0, 1701, 0

Original file name:

WWHook.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\windows\syswow64\whook_x64.dll

Digital Signature

Signed by:

Deskperience Software

Authority:

The USERTRUST Network

Valid from:

10/26/2009 7:00:00 AM

Valid to:

10/26/2012 6:59:59 AM

Subject:

CN=Deskperience Software, O=Deskperience Software, STREET="Daniel Barcianu, nr. 31", STREET="bl A2, ap. 30, sector 3", L=Bucharest, S=Bucharest, PostalCode=030901, C=RO

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

10C34CC4139D2244F3925973CD47FE91

File PE Metadata

Compilation timestamp:

9/29/2011 9:43:06 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:8Ujc8XCqPTkAgH6pzmOdkHSiTchLrW8i5lnR:8Uo8XrTNgalmOdkHZoZC/R

Entry address:

0x52F8

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 9B, 51, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 20, 48, 8B, D9, C6, 41, 18, 00, 48, 85, D2, 75, 7F, E8, E5, 0B, 00, 00, 48, 89, 43, 10, 48, 8B, 90, C0, 00, 00, 00, 48, 89, 13, 48, 8B, 88, B8, 00, 00, 00, 48, 89, 4B, 08, 48, 3B, 15, D1, 48, 01, 00, 74, 16, 8B, 80, C8, 00, 00, 00, 85... 
[+]

Entropy:

6.2118

Code size:

71 KB (72,704 bytes)

The file whook_x64.dll has been discovered within the following program.

WordCaptureX Demo by Deskperience

www.deskperience.com

About 17% of users remove it

Scan whook_x64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.