home

pdfilter.sys

Dekart Private Disk

Dekart

It runs as a Windows kernel mode device driver named “PDFILTER”.
Publisher:
Dekart  (signed and verified)

Product:
Dekart Private Disk

Description:
Dekart® Private Disk Filter Driver

Version:
1.5.7

MD5:
5acb5a304949a071df113fb4404b0f79

SHA-1:
684e3ab577196465493e80cbf03b5309de629422

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:08:58 PM UTC  (a few moments ago)

File size:
27.6 KB (28,232 bytes)

Product version:
1.24

Copyright:
Copyright © Dekart

Original file name:
pdfilter.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Program Files\dekart\private disk\pdfilter.sys

Digital Signature
Signed by:
Dekart

Authority:
GlobalSign nv-sa

Valid from:
10/9/2007 9:05:49 PM

Valid to:
10/9/2010 9:05:49 PM

Subject:
E=info@dekart.com, CN=Dekart, O=Dekart, C=MD

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001158515F3C5

File PE Metadata
Compilation timestamp:
11/21/2007 9:44:10 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.0

CTPH (ssdeep):
384:IdajwrcaPkgbRnrYJSa5MXqKGeD/2vDiGSDAI04Gf2OJ06dUb+o:hCTPhr95D/2vDEDKSJio

Entry address:
0x36F1

Entry point:
55, 8B, EC, 83, EC, 14, 83, 65, FC, 00, 53, 56, 57, 68, 60, 3C, 01, 00, E8, DA, 01, 00, 00, 8B, 75, 08, 6A, 00, 56, 68, 5E, 36, 01, 00, E8, 8E, 02, 00, 00, 83, C4, 0C, 6A, 1B, 59, 6A, 1A, 8D, 7E, 38, B8, EE, 34, 01, 00, F3, AB, 59, C7, 46, 34, 24, 36, 01, 00, C7, 46, 28, 50, 3F, 01, 00, 8B, 35, E8, 3B, 01, 00, 68, 0C, 3F, 01, 00, 33, C0, BF, 40, 42, 01, 00, 68, 18, 42, 01, 00, F3, AB, FF, D6, 68, 30, 3F, 01, 00, 68, 30, 42, 01, 00, FF, D6, 68, 30, 00, DF, FF, 8D, 45, EC, 50, FF, D6, 6A, 01, 8D, 45, EC, 50...
 
[+]

Entropy:
6.7043

Developed / compiled with:
Microsoft Visual C++

Code size:
15.4 KB (15,744 bytes)

Driver
Display name:
PDFILTER

Type:
Kernel device driver (KernelDriver)


Scan pdfilter.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.