home

TIHook.dll

Touch-It Virtual Keyboard

Chessware SA

Publisher:
Chessware SA  (signed and verified)

Product:
Touch-It Virtual Keyboard

Description:
Touch-It Hook (64 bit)

Version:
5.11.0.132

MD5:
7671ccd59ad710f4d81c39648d8455c0

SHA-1:
0feaea13493fb31c9646690a6a7c4bcec64ae872

SHA-256:
4c2aaee777c67c3513dcc006787f60fcbe42e89cc29a2bda81a853f1f55a36d4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 1:29:39 PM UTC  (today)

File size:
1.7 MB (1,754,952 bytes)

Product version:
5.11

Copyright:
copyright©2016 Chessware SA

Original file name:
TIHook.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\chessware\touch-it\tihook.dll

Digital Signature
Signed by:
Chessware SA

Authority:
COMODO CA Limited

Valid from:
8/16/2016 7:00:00 AM

Valid to:
2/2/2019 6:59:59 AM

Subject:
CN=Chessware SA, O=Chessware SA, STREET=Route du Loclat 7, L=Colombier, S=NE, PostalCode=2013, C=CH

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008A2B736B0CC4F5F24D3F4508F4F8D9B6

File PE Metadata
Compilation timestamp:
12/1/2016 3:55:24 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:lVWmZhD/1JWnr2cM823vL4F927bFU9YzYt4Rq+5V3UJtHqXMQyt0qh+7o6Sihz0J:lVWmZK0vL4F9qHUJlqcQyr07xSMLfev

Entry address:
0x14C540

Entry point:
55, 48, 81, EC, 80, 01, 00, 00, 48, 8B, EC, 48, 89, 4D, 30, 89, 55, 3C, 4C, 89, 45, 40, 90, 48, 8D, 4D, 48, E8, B0, 2A, EC, FF, 83, F8, 01, 0F, 9E, C1, 48, 0F, B6, C9, 89, 8D, 7C, 01, 00, 00, 85, C0, 75, 49, 48, 8D, 4D, 48, 48, 8D, 15, 61, 00, 00, 00, 4C, 8B, 45, 30, 44, 8B, 4D, 3C, 48, 8B, 45, 40, 48, 89, 44, 24, 20, E8, 5B, D1, EC, FF, 48, 8D, 05, B4, FE, FF, FF, 48, 89, 05, 55, 6C, 03, 00, C7, C1, 01, 00, 00, 00, E8, A2, FE, FF, FF, EB, 08, 90, 90, E8, 09, 23, EC, FF, 90, E8, B3, 2B, EC, FF, 8B, 85, 7C...
 
[+]

Entropy:
5.9285

Code size:
1.3 MB (1,410,048 bytes)

Scan TIHook.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.