» dldriverkbd0.sys
Overview
Analysis
File Details
Behaviors (1)

dldriverkbd0.sys

DeviceLock

DeviceLock Ltd.

It runs as a Windows kernel mode device driver named “DLDriverKbd0”.

File name:

dldriverkbd0.sys

Publisher:

DeviceLock, Inc. (signed by DeviceLock Ltd.)

Product:

DeviceLock®

Description:

DeviceLock® PS/2 keyboard scrambler driver

Version:

7, 2, 4, 46662

MD5:

d0d3cdd5aefd6ab314bb71e70e522c90

SHA-1:

129392c0340c5a312eb146bb7c14261a0b465e5f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 11:26:23 PM UTC (a few moments ago)

File size:

31.3 KB (32,000 bytes)

Product version:

7, 2, 4, 46662

Trademarks:

DeviceLock is a registered trademark of DeviceLock, Inc.

Original file name:

DLDriverKbd.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Windows\System32\drivers\dldriverkbd0.sys

Digital Signature

Signed by:

DeviceLock Ltd.

Authority:

VeriSign, Inc.

Valid from:

12/1/2012 3:00:00 AM

Valid to:

1/31/2014 2:59:59 AM

Subject:

CN=DeviceLock Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=DeviceLock Ltd., L=Moscow, S=Moscow, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

39FEB6B1BCFE53D327D9BB005D196C24

File PE Metadata

Compilation timestamp:

3/1/2013 8:39:30 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

9.0

Entry address:

0x7000

Entry point:

55, 8B, EC, 83, EC, 1C, 6A, 00, 68, 91, 31, 01, 00, 68, C0, 59, 01, 00, FF, 15, 28, 10, 01, 00, 6A, 00, 68, 91, 31, 01, 00, 68, 40, 54, 01, 00, FF, 15, 28, 10, 01, 00, E8, FE, AC, FF, FF, 0F, B6, C0, 85, C0, 75, 0A, B8, 01, 00, 00, C0, E9, 9A, 01, 00, 00, A1, 24, 10, 01, 00, 89, 45, E4, 8B, 45, E4, 8B, 40, 04, 89, 45, F4, 8B, 45, E4, 8B, 00, 89, 45, F0, 8B, 45, E4, 8B, 40, 08, 39, 45, F4, 75, 02, EB, 04, F3, 90, EB, DE, 8B, 45, F0, A3, DC, 51, 01, 00, FF, 35, DC, 51, 01, 00, FF, 15, 20, 10, 01, 00, 59, 6A... 
[+]

Entropy:

6.6567

Developed / compiled with:

Microsoft Visual C++

Code size:

18 KB (18,432 bytes)

Driver

Display name:

DLDriverKbd0

Type:

Kernel device driver (KernelDriver)

Group:

Keyboard Port

Scan dldriverkbd0.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.