Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1, 0, 0, 21 9.09%
1, 0, 0, 21 9.09%
1, 0, 0, 21 9.09%
1, 0, 0, 21 36.36%
1, 0, 0, 21 9.09%
1, 0, 0, 21 9.09%
1, 0, 0, 21 18.18%
(Note, Garena Online Pte Ltd publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
kernel32.dll
VirtualQuery, GetProcAddress, CreateMutexW, WaitForSingleObject, CloseHandle, GetLastError, ReleaseMutex, WideCharToMultiByte, MultiByteToWideChar, GlobalAlloc, GlobalLock, GlobalUnlock, GlobalSize, GetCurrentProcess, GetCurrentProcessId, CreateFileW, FreeLibrary, CreateSemaphoreA, GetSystemTimeAsFileTime, ReleaseSemaphore, WaitForMultipleObjects, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetFileSize, ReadFile, LoadLibraryW, MapViewOfFile, OpenFileMappingW, UnmapViewOfFile, GetProcessHeap, TlsAlloc, TlsFree, TlsGetValue, Sleep, OpenEventA, ResetEvent, TlsSetValue, InterlockedExchange, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, LocalFree, FormatMessageA, lstrlenW, GetModuleFileNameW, GetModuleHandleExW, GetModuleHandleW, SetEvent, CreateEventA, GetTickCount, GetCurrentThreadId, GetLocalTime, CreateFileMappingW, OutputDebugStringA, HeapFree
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoTaskMemFree
shell32.dll
ShellExecuteW, SHGetPathFromIDListW, SHGetSpecialFolderLocation
user32.dll
wsprintfW, RegisterClipboardFormatW, GetClipboardData, IsClipboardFormatAvailable, SetClipboardData, OpenClipboard, CloseClipboard, SetActiveWindow, OffsetRect, GetWindowRect, UnhookWindowsHookEx, SetWindowsHookExW, GetForegroundWindow, GetActiveWindow, SetCursor, CallNextHookEx, GetKeyState, EqualRect, UnionRect
Export table
_InstallAutoLaunchHook@0
_InstallHonInviteHook@0
_InstallHook@0
_IsOverlayHooked@0
_LoadConfig@4
_RemoveAutoLaunchHook@0
_RemoveHonInviteHook@0
_RemoveHook@0
_SetOverlayLang@4

overlay.dll

D3DHookL Dynamic Link Library by Garena Online Pte Ltd (Signed)

Remove overlay.dll
Version:   1, 0, 0, 21
MD5:   208dbaa40eea0af6a0438d3391e9486a
SHA1:   60caf14b1c2be441905c51360f06628f43c17a39

Overview

overlay.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Garena Online Pte Ltd which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:overlay.dll
Product name:D3DHookL Dynamic Link Library
Typical file path:C:\game\garena plus\bbtalk\overlay.dll
Original name:D3DHookL.dll
File version:1, 0, 0, 21
Size:1.68 MB (1,764,864 bytes)
Certificate
Issued to:Garena Online Pte Ltd
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 36.36%
Windows 8 27.27%
Windows 7 Home Premium 18.18%
Windows 7 Ultimate 9.09%
Windows 8 Enterprise 9.09%

Distribution by countryDistribution by country

Taiwan installs about 27.27% of D3DHookL Dynamic Link Library.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 33.33%
Hewlett-Packard 22.22%
Toshiba 22.22%
American Megatrends 11.11%
GIGABYTE 11.11%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE