home

wphookadsrv.exe

WPHookSrv Application

RaonSecure Co., Ltd.

This is the uninstaller utility registered in the Windows Control Panel for the program TouchEn web (Web Page Protector) by SoftSecurity Co. Ltd..
Publisher:
RaonSecure Co., Ltd.  (signed and verified)

Product:
WPHookSrv Application

Version:
1, 2, 1, 6

MD5:
99fd4a53b2e9006264199a513b6048f1

SHA-1:
6532f0c658ba94968e8382de8e26df3bae4f6a0b

SHA-256:
c76710a88eeddd9bf33fcc54b3ad20e92c6f2aaabe5b9f681ab6e562678f6c22

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:31:17 PM UTC  (today)

File size:
363.4 KB (372,168 bytes)

Product version:
1, 2, 1, 6

Copyright:
Copyright(C)2013 RaonSecure Co., Ltd.

Original file name:
WPHookSrv.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\wphookadsrv.exe

Digital Signature
Signed by:
RaonSecure Co., Ltd.

Authority:
Thawte, Inc.

Valid from:
1/25/2013 9:00:00 AM

Valid to:
1/26/2015 8:59:59 AM

Subject:
CN="RaonSecure Co., Ltd.", OU=Quality Assurance, O="RaonSecure Co., Ltd.", L=Anyang-si, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
09D719AA2A3E768E277A2EF233AE636C

File PE Metadata
Compilation timestamp:
5/30/2013 4:22:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:UI+vUu0Py2otm0yrAYKQFA1sv0URMBZf0fNrDxJLYK4fjsDrT7jLzbDTjaA9Kaqc:mvBa7tB7vaPfA4f7bSGL0NgSorW

Entry address:
0x6041

Entry point:
E8, 00, 3A, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B, C1, C3, 8D, 41, FE, 8B...
 
[+]

Entropy:
5.7842

Code size:
72 KB (73,728 bytes)

Program Uninstaller
Program name:
TouchEn web (Web Page Protector)

Display publisher:
SoftSecurity Co. Ltd.

Uninstall string:
C:\windows\WPHookAdSrv.exe /uninstall


Scan wphookadsrv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.