home

idisplay.sys

SHAPE GmbH

It runs as a Windows 64-bit kernel mode device driver named “Filtering Dxkg”. This is installed with iDisplay 2.4.2.
Publisher:
SHAPE GmbH  (signed and verified)

MD5:
c1f9c51359d95f2b5eb87b96fd4b2506

SHA-1:
d4f27c6203f41778a8bae87332fabee6dc0be472

SHA-256:
577b4dee585102fd2091d17960e24a26b94a6fa01995134a7d9708c40d27224e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:28:10 PM UTC  (today)

File size:
44.9 KB (45,992 bytes)

File type:
Driver (Win64 SYS)

Common path:
C:\Program Files\idisplay\idisplay.sys

Digital Signature
Signed by:
SHAPE GmbH

Authority:
GlobalSign nv-sa

Valid from:
8/29/2012 8:50:50 AM

Valid to:
8/30/2013 8:50:50 AM

Subject:
E=support@shape.ag, CN=SHAPE GmbH, O=SHAPE GmbH, L=Stuttgart, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121087B9A0FC860911FD4AF45DF6C4404FF

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:TAwORyQVdUhlOs2YGrVqylygQIo4CzkBs1xl0GFyjokg4+ENlchV:TkdWsYGrVXygQIo4UkBsDl0ZjrD+EXcT

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, C4, BF, FF, FF, CC, CC, 78, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 6E, C3, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F0, C0, 00, 00, 04, C1, 00, 00, 16, C1, 00, 00, 2E, C1, 00, 00, 38, C1, 00, 00, 42, C1, 00, 00, 5E, C1, 00, 00, 76, C1, 00, 00, 8A, C1, 00, 00, A6, C1, 00, 00, BC, C1, 00, 00, CC, C1, 00, 00, DC, C1, 00, 00, F6, C1, 00, 00, 0C, C2, 00, 00, 2A, C2, 00, 00, 42, C2, 00, 00, 62, C2...
 
[+]

Driver
Display name:
Filtering Dxkg

Service name:
DxkgFilter

Type:
Kernel device driver (KernelDriver)


The file idisplay.sys has been discovered within the following program.

iDisplay 2.4.2  by SHAPE
www.shape.ag/en/faq/sections/idisplayiphone.php
About 5% of users remove it
 
Powered by Should I Remove It?

Scan idisplay.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.