home

dlimgdevflt.sys

CenterTools DriveLock

CenterTools Software GmbH

It runs as a Windows kernel mode device driver named “DLImgDevFlt”.
Publisher:
CenterTools Software GmbH  (signed and verified)

Product:
CenterTools DriveLock

Description:
DriveLock Device locker filter driver

Version:
5, 5, 0, 295

MD5:
59cacc977292b727d7fb7d63ba660369

SHA-1:
c28d51f2eacc1cdf5d54d26be754939c2fb14020

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 9:31:13 PM UTC  (today)

File size:
53 KB (54,232 bytes)

Product version:
5, 5, 0, 0

Copyright:
Copyright © 2000,2008 CenterTools Software GmbH.

Original file name:
DLDevFlt.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\dlimgdevflt.sys

Digital Signature
Signed by:
CenterTools Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
10/25/2007 5:17:44 PM

Valid to:
10/25/2008 5:17:44 PM

Subject:
E=info@centertools.de, CN=CenterTools Software GmbH, O=CenterTools Software GmbH, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000115D7BD8D85

File PE Metadata
Compilation timestamp:
9/4/2008 5:12:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
768:8jCKPWPJbn9rqxSjaHCq1tKouslfkX/2VSp8NJStLwZD:2CK2Fn9aSjq3nu7XuVSe3St4

Entry address:
0xA060

Entry point:
56, 57, 68, 57, 64, 6D, 20, 6A, 1C, 33, F6, 56, FF, 15, C8, 52, 01, 00, 3B, C6, 74, 13, 68, D8, 9E, 01, 00, 8B, C8, E8, D2, 80, FF, FF, A3, A8, 6A, 01, 00, EB, 06, 89, 35, A8, 6A, 01, 00, E8, BA, 63, FF, FF, 8B, F8, 3B, FE, 74, 09, E8, 55, 63, FF, FF, 8B, C7, EB, 69, 8B, 0D, A8, 6A, 01, 00, 6A, 2B, 68, F0, 9E, 01, 00, 56, 68, 90, 9F, 01, 00, E8, 59, 7A, FF, FF, 8B, 54, 24, 0C, 8B, 42, 18, 6A, 1C, 59, 6A, 37, C7, 42, 34, 8A, 7D, 01, 00, C7, 40, 04, 4C, 94, 01, 00, 68, A8, 9F, 01, 00, 56, 8D, 7A, 38, B8, 8A...
 
[+]

Code size:
34.5 KB (35,328 bytes)

Driver
Display name:
DLImgDevFlt

Type:
Kernel device driver (KernelDriver)


Scan dlimgdevflt.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.