home

dtscsi.sys

DAEMON Tools

DAEMON Tools Code Signing Services

It runs as a Windows 64-bit kernel mode device driver named “dtscsi”.
Publisher:
DT Soft Ltd.  (signed by DAEMON Tools Code Signing Services)

Product:
DAEMON Tools

Description:
SCSI miniport

Version:
4.03.0.0 built by: WinDDK

MD5:
937bb325d926131af72905f31f198500

SHA-1:
a0ffaaeb8d20580c87eb29efdcedadad3589c9be

SHA-256:
8edbae7468a4789715e2d459f6e420d1eea52829802d1e95e8cda5e64ceb6b02

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:58:10 PM UTC  (today)

File size:
253.4 KB (259,480 bytes)

Product version:
4.03.0.0

Copyright:
Copyright (C) 2000-2005

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\dtscsi.sys

Digital Signature
Signed by:
DAEMON Tools Code Signing Services

Authority:
DAEMON Tools Root CA

Valid from:
10/1/2004 6:00:00 AM

Valid to:
10/1/2009 5:59:59 AM

Subject:
CN=DAEMON Tools Code Signing Services, OU=Class A

Issuer:
CN=DAEMON Tools Root CA

Serial number:
A39928B245B973874DC1B2A3C7F2FF3A

File PE Metadata
Compilation timestamp:
12/10/2005 4:06:04 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
6144:1LJokFT9t9Hg0eXpbHpi4d1a37Iqnt9ZWhG:1JZT9PisAsIq1

Entry address:
0x1B750

Entry point:
E9, 1B, F9, FF, FF, CC, CC, CC, 68, 97, C5, 03, 00, E9, 9E, FC, FF, FF, 9A, 82, 51, 37, 7C, A8, 68, CE, 37, 93, 06, 3A, E8, 58, BB, C3, 14, 10, 6A, 9C, 41, A0, A5, D3, 7E, 06, 9A, 25, 7D, 85, 60, B7, 27, 4E, B6, F8, E5, 81, 77, 16, F6, A2, 55, DD, 90, DF, A5, D9, AB, C3, 4A, 1E, AC, 2E, 05, 0E, 51, B5, BD, F3, 97, BF, 8B, 5C, 7C, 03, 8C, 7B, CB, 35, D6, 05, 5F, 17, 05, 49, 91, 25, 49, 7D, A9, A3, E5, 80, 94, C3, 7C, 88, 3A, 17, B5, 7D, 31, A4, FA, F3, A4, 2A, 6C, 14, A9, 8E, 4A, D5, 78, 6F, 62, 5B, 14, 53...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
164.5 KB (168,448 bytes)

Driver
Display name:
dtscsi

Type:
Kernel device driver (KernelDriver)

Group:
SCSI miniport


Scan dtscsi.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.