File scan report
Verdict Safe
Is Whisper.
Only 1 of the 71 antivirus engines that checked it flagged this widely submitted DLL, while major antivirus engines, sandbox observations, host reputation, and external…
Read the whole reasonShow less
Strong evidence · Widely seen for a long time, and nothing harmful found.
Good practice2 tips
We found nothing harmful in this file.
Use it only as part of a program you got from the developer's own website.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
1 of 71 flagged
- Flagged 1
- No detection 70
- No result 4
- Code signing Unsigned
- Test run Completed
- First seen 3y ago
Chapter 02
Why we think so
4 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Cynet was the only engine among 75 to flag the DLL, and none of the major antivirus engines detected it. Its long-established prevalence, non-malicious sandbox results, and completed reputation check for the sole contacted IP make that isolated alert highly likely to be a false positive.
Only 1 of the 71 antivirus engines that checked it flagged the file, and that alert came from Cynet without a named malware family. All 18 major antivirus engines that reported results produced no detection. The file has been submitted by 424 distinct sources over more than three years, yet broader detection consensus has not developed. Four sandbox runs returned no malicious verdict, identified no high-risk techniques or injection targets, and the sole contacted IP had no malicious or suspicious reputation record. The DLL is unsigned and uses anti-analysis-related features, but those weaker concerns are not corroborated by malware-specific rules, public sample-database listings, malicious files it created, or hostile evidence from the test run.
What We Detected
Only Cynet flagged the DLL, amounting to 1 of the 71 antivirus engines that checked it. The alert did not identify a specific malware family, while all 18 reporting major antivirus engines produced no detection. The file is also well established, with 424 distinct submitters and 489 submissions over more than three years.
Threat Behavior
Four sandbox runs produced no malicious verdict and showed no high-risk techniques, named injection targets, or persistence indicators. The DLL contacted one external IP directly; the completed reputation check covering that contact found no malicious or suspicious record. Anti-debugging and delayed-execution characteristics were noted, but these features can occur in protected or diagnostic software and were not backed by stronger hostile activity.
What To Do Now
No removal action is indicated by the available evidence. Keep security software enabled and, if the DLL arrived unexpectedly or from an untrusted source, verify its origin before loading it into an application.
Where this verdict could be wrong3 caveats
- Cynet assigned a malicious score, although no other engine corroborated it.
- The unsigned DLL contacted one external IP directly, but the completed reputation check found no malicious or suspicious record for that address.
- The file carries anti-debugging and long-sleep tags; these can impede analysis but were not accompanied by high-risk evidence from the test run.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- All 18 reporting major antivirus engines produced no detection.
- The file has mature prevalence across 424 distinct submitters and 489 submissions.
- Four sandbox runs returned no malicious verdict and showed no high-risk techniques or process injection.
- The sole observed external IP had no malicious or suspicious reputation record.
- No malware-specific community rules, public malware-sample listing, malicious child, packing, or brand mismatch was found.
- The DLL is unsigned, so its publisher cannot be authenticated.
- Cynet reported a generic malicious result.
- The file includes anti-debugging and delayed-execution characteristics.
- It made a direct connection to an external IP rather than an application domain.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 4 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 4isolated sandbox runs
- 11sandbox rule tags
- 0spawned processes
- 1network contact
- 39filesystem & mutex artifacts
Includes the sandbox verdicts, 11 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
1 of the 71 antivirus engines that checked it flags it; no publisher signature.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
The saved verdict treats these detections as likely false positives.
- CynetMalicious (score: 100)
File fingerprint
- Last analyzed
- Oct 21, 2026, 1:44 PM UTC
- SHA-256
41de3af338d54ab09a85f6e94a688b1b2a18f486188b10cd16157ac47897f1be- SHA-1
bfae6a9e11905f8e92d9ff061321a4f8705cc572- MD5
34d06f51c5f919576f696fcf494f83ab
About this file
Whisper.dll says it is DirectCompute port of whisper.cpp library, 576.5 kB.
- Claims to be
- DirectCompute port of whisper.cpp libraryFrom the file's own version information, written by whoever built it.
- Original name
- Whisper.dllMatches the shared file name.
- Type and size
- Win32 DLL · 576.5 kB
- Signer
- UnsignedNo code signature.
- First seen
- Jul 23, 2023On VirusTotal.
- Submitted by
- 424 distinct sources
- Packer
- None detected
- Entropy
- 6.18 of 8
First scanned
Includes every engine result (75), PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is Whisper.dll safe?
What is Whisper.dll?
How many antivirus engines detected Whisper.dll?
What is the SHA-256 hash of Whisper.dll?
Is it safe to use Whisper.dll?
How up to date is this analysis of Whisper.dll?
Community
Member reviews and reports for this exact file hash.