» lmiscrhook64-clone000.dll
Overview
Analysis
File Details

lmiscrhook64-clone000.dll

LMIScrHook

LogMeIn, Inc.

File name:

Publisher:

LogMeIn, Inc. (signed and verified)

Product:

LMIScrHook

Description:

LMIScrHook Hook DLL

Version:

0.1.416

MD5:

e00b71a253d1ba4316e0fe1d5dcd0cef

SHA-1:

50848b47ccbdba185bfa643bab4d972335d8fef8

SHA-256:

3537c0cc5994715e83f33d2d5b7959d0393b2ad907db8c30e778d7ff6fda23e8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/27/2024 12:47:54 AM UTC (today)

File size:

183.4 KB (187,792 bytes)

Product version:

0.1.416

Original file name:

LMIScrHook.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\lmiscrhook64-clone000.dll

Digital Signature

Signed by:

LogMeIn, Inc.

Authority:

Symantec Corporation

Valid from:

9/8/2015 8:00:00 PM

Valid to:

11/7/2018 6:59:59 PM

Subject:

CN="LogMeIn, Inc.", O="LogMeIn, Inc.", L=Boston, S=Massachusetts, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1C683F7B8FFBCDACE1927D588D4906CF

File PE Metadata

Compilation timestamp:

1/11/2017 7:05:37 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

14.0

Entry address:

0x463C

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 8F, 07, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 67, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 20, 48, 8B, D9, 33, C9, FF, 15, 33, 0B, 01, 00, 48, 8B, CB, FF, 15, 22, 0B, 01, 00, FF, 15, BC, 09, 01, 00, 48, 8B, C8, BA, 09, 04, 00, C0, 48, 83, C4, 20, 5B, 48, FF, 25, 18, 0B, 01, 00, 48, 89, 4C, 24, 08, 48, 83, EC, 38, B9, 17, 00... 
[+]

Entropy:

5.1583

Code size:

78.5 KB (80,384 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.