SDHookInst64.exe
Live Protection Configuration Tool file version info
Program on Windows 1 known copy with hashes
Is it the real SDHookInst64.exe?
Original name
SDHookInst32.exe in the file’s header: a renamed copy still carries itInstalled in
C:\Program Files (x86)\Spybot - Search & Destroy 2\Signed bySafer-Networking Ltd.
ProductSpybot - Search & Destroy, Safer-Networking Ltd.
DescriptionLive Protection Configuration Tool
1 known copy
2.7.64.2 · C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookInst64.exe · signed by Safer-Networking Ltd.
2ba8ba5cc2aadea45fec891e66853fd3820641d10d18b3640ea2ca447510c039From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.