» windowshook_x64.dll
Overview
Analysis
File Details
Programs (1)

windowshook_x64.dll

iDisplay

SHAPE GmbH

This is installed with iDisplay 2.4.2.

File name:

windowshook_x64.dll

Publisher:

SHAPE (signed by SHAPE GmbH)

Product:

iDisplay

Description:

iDisplay Server

Version:

2.1.0.0

MD5:

fc16e9ebefc5b75067366e47a0cbbc61

SHA-1:

1af466663d314cd55b1ec306d434cf924e4f1060

SHA-256:

98641bc41069b2a1481731a63768b345b44fbd28e9eedf1fd3dd41e3a9b911a0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 8:12:50 AM UTC (today)

File size:

150.4 KB (154,024 bytes)

Product version:

2.1.0.0

Original file name:

WindowsHook.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\idisplay\windowshook_x64.dll

Digital Signature

Signed by:

SHAPE GmbH

Authority:

GlobalSign nv-sa

Valid from:

8/29/2012 4:50:50 AM

Valid to:

8/30/2013 4:50:50 AM

Subject:

E=support@shape.ag, CN=SHAPE GmbH, O=SHAPE GmbH, L=Stuttgart, S=Baden-Wuerttemberg, C=DE

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121087B9A0FC860911FD4AF45DF6C4404FF

File PE Metadata

Compilation timestamp:

8/31/2012 9:43:03 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:Jahgbn83nN7C59T+b+p9opBaGX+0RbG50Lr9Q5dQPEEN5:shcn83No9T+yp9ovaGuIS5Sr9nt5

Entry address:

0xB104

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, B3, 27, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 7C, 24, 18, 55, 48, 8B, EC, 48, 83, EC, 60, 48, 8B, FA, 48, 8B, D9, 48, 8D, 4D, C0, 48, 8D, 15, 69, E5, 00, 00, 41, B8, 40, 00, 00, 00, E8, 2E, F6, FF, FF, 48, 8D, 55, 10, 48, 8B, CF, 48, 89, 5D, E8, 48, 89, 7D, F0, E8, F0, 77... 
[+]

Entropy:

6.1802

Code size:

95 KB (97,280 bytes)

The file windowshook_x64.dll has been discovered within the following program.

iDisplay 2.4.2 by SHAPE

www.shape.ag/en/faq/sections/idisplayiphone.php

About 5% of users remove it

Scan windowshook_x64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.