home

DTLite.exe

DAEMON Tools Lite

Disc Soft Ltd

This is a setup program which is used to install the application. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘DAEMON Tools Lite’. This is installed with DAEMON Tools Lite. The file has been seen being downloaded from download1600.mediafire.com and multiple other hosts.
Publisher:
Disc Soft Ltd  (signed and verified)

Product:
DAEMON Tools Lite

Version:
4.49.1.0356

MD5:
f73154e180105822a5f9b755ba933737

SHA-1:
89c8c4cda6e0ad3bd0e3a0685faf700cd1ec5cc8

SHA-256:
1cd775b6ce3736a70ec5fc7a6b77a2feda70d59b49a66046cc20b341005501d9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/4/2024 5:13:05 PM UTC  (today)

File size:
3.5 MB (3,696,912 bytes)

Product version:
4.49.1.0356

Copyright:
© 2000-2013 Disc Soft Ltd.

Original file name:
DTLite.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Disc Soft Ltd

Authority:
GlobalSign nv-sa

Valid from:
2/21/2014 5:58:31 PM

Valid to:
5/30/2015 7:52:02 PM

Subject:
E=finpr@disc-soft.com, CN=Disc Soft Ltd, O=Disc Soft Ltd, L=Belize city, S=Belize, C=BZ

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121352E0B2023D1A751886DCBE97D37795E

File PE Metadata
Compilation timestamp:
3/4/2014 10:19:46 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:hRiTYVvpjARecqBRJ76JyIG+hk0hvM7BlCcPcwqw+1uHeXVLUum:hRwY17dI6XBlCcP5qw+1uYUum

Entry address:
0x15CFEC

Entry point:
E8, 87, 7E, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 8B, FF, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 5A, D0, 55, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 64, C3, 01, 00, 8B, 45, 0C, 8B, 40, 04, 83, E0, FD, 8B, 4D, 0C, 89, 41, 04, 64, 8B, 3D...
 
[+]

Code size:
1.6 MB (1,639,936 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DAEMON Tools Lite

Command:
"C:\programs\daemon tools lite\dtlite.exe" -autorun


The file DTLite.exe has been discovered within the following programs.

DAEMON Tools Lite  by Disc Soft Ltd
Publisher's description - “Most popular product that offers easy tools for making simple disc image files and emulating virtual CD/DVD drives. Mount *.mdx, *.mds/*.mdf, *.iso, *.b5t, *.b6t, *.bwt, *.ccd, *.cdi, *.bin/*.cue, *.ape/*.cue, *.flac/*.cue, *.nrg, *.isz disc images to a virtual drive.”
www.daemon-tools.cc/products/dtLite
8% remove it
 
Powered by Should I Remove It?

The file DTLite.exe has been seen being distributed by the following 6 URLs.

http://download1600.mediafire.com/36br3dtodgng/.../DTLite.exe

http://download1350.mediafire.com/jwz4loxy3gug/.../DTLite.exe

http://download1847.mediafire.com/l44ftf9lzqvg/.../DTLite.exe

http://download1600.mediafire.com/igo3d45vqbmg/.../DTLite.exe

http://download1763.mediafire.com/fu3c60s3auig/.../DTLite.exe

http://download1763.mediafire.com/ukr1ed1akbsg/.../DTLite.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.