» gestures.dll
Overview
Analysis
File Details
Programs (1)

gestures.dll

gestures Dynamic Link Library

EverNote Corporation

This is installed with ritePen.

File name:

gestures.dll

Publisher:

Evernote Corp. (signed by EverNote Corporation)

Product:

gestures Dynamic Link Library

Version:

3, 5, 22, 0

MD5:

aaad32165d0a3f32022208a7bb653265

SHA-1:

ec785e759c6017ffff5d9e66db41bdb01a83dd4e

SHA-256:

4d455d28c08ebe5180452774b4f6ca02c7fb01cf69768ca27fbdec47472d3322

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/2/2024 7:30:09 PM UTC (today)

File size:

72.7 KB (74,424 bytes)

Product version:

3, 5, 22, 1

Original file name:

gestures.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\evernote\ritepen\gestures.dll

Digital Signature

Signed by:

EverNote Corporation

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/11/2009 2:00:00 AM

Valid to:

11/9/2011 12:59:59 AM

Subject:

CN=EverNote Corporation, OU=OPERATIONS, O=EverNote Corporation, L=Sunnyvale, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

788BBAAC7FEDE423A10E1FAA00879136

File PE Metadata

Compilation timestamp:

11/14/2009 2:05:04 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

768:crjiFG0cGcoAeOUTpQj4gUSpV9gasjPIEXiiiZQzQN8fAI1tRJXg1HGnLO:GfGEjJpV9gjAESiiQiGbtLg1mny

Entry address:

0x21BA

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 70, 23, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 28, F1, 00, 10, 89, 0D, 24, F1, 00, 10, 89, 15, 20, F1, 00, 10, 89, 1D, 1C, F1, 00, 10, 89, 35, 18, F1, 00, 10, 89, 3D, 14, F1, 00, 10, 66, 8C, 15, 40, F1, 00, 10, 66, 8C, 0D, 34, F1, 00, 10, 66, 8C, 1D, 10, F1, 00, 10, 66, 8C, 05, 0C, F1, 00, 10, 66, 8C, 25, 08, F1, 00, 10, 66, 8C, 2D, 04, F1, 00, 10, 9C, 8F, 05, 38, F1, 00, 10, 8B, 45... 
[+]

Code size:

44 KB (45,056 bytes)

The file gestures.dll has been discovered within the following program.

ritePen by Evernote Corp.

Publisher's description - “ritePen is an advanced handwriting recognition software for Windows-based pen-enabled computers. Write anywhere on the screen or other input surface and watch your handwriting instantly converted to text and entered into any Windows application.”

www.ritescript.com

8% remove it

Scan gestures.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.