home

DLCrypt.sys

DriveLock

CenterTools Software GmbH

Publisher:
CenterTools Software GmbH  (signed and verified)

Product:
DriveLock

Description:
CenterTools DriveLock Encrpytion driver

Version:
5, 5, 0, 207

MD5:
685beb4a66a10167e4831086aae6f07c

SHA-1:
52fa24cfca3fa8b411b4275d5f3eb6d29ec825ff

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 11:17:17 PM UTC  (a few moments ago)

File size:
162.3 KB (166,232 bytes)

Product version:
5, 5, 0, 0

Copyright:
(C) Copyright 2004,2008 CenterTools Software GmbH.

Trademarks:
Part of DriveLock Encryption Library, Portions (C) Copyright 2004,2007 TrueCrypt Foundation.

Original file name:
DLCrypt.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\dlcrypt.sys

Digital Signature
Signed by:
CenterTools Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
10/25/2007 5:17:44 PM

Valid to:
10/25/2008 5:17:44 PM

Subject:
E=info@centertools.de, CN=CenterTools Software GmbH, O=CenterTools Software GmbH, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000115D7BD8D85

File PE Metadata
Compilation timestamp:
9/4/2008 5:12:30 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
3072:UMqqDL2/0V8RMaNvKHx2/vdDTjTDTjJLLLLLLLBAWvM/13PPgJxUF3UU9f3bFezp:3qqDL6nxlKo/vdDTjTDTjJLLLLLLL+Wx

Entry address:
0x251AC

Entry point:
B8, B1, C3, 01, 00, 56, 8B, 74, 24, 08, 6A, 01, 68, C0, 50, 03, 00, 89, 46, 38, 89, 46, 40, 89, 86, 80, 00, 00, 00, 89, 46, 5C, 89, 46, 78, 89, 86, A4, 00, 00, 00, 89, 46, 44, 89, 46, 48, 89, 46, 70, C7, 46, 34, 88, C3, 01, 00, FF, 15, A0, 03, 01, 00, 33, C0, 50, 50, 50, 68, A0, 50, 03, 00, FF, 15, 9C, 03, 01, 00, 56, C7, 05, E0, 50, 03, 00, 01, 00, 00, 00, E8, F5, FE, FF, FF, 5E, C2, 08, 00, CC, 38, 52, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4C, 57, 02, 00, 00, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
130.5 KB (133,632 bytes)

Scan DLCrypt.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.