Information about isafekrnlkit.sys

isafekrnlkit.sys

File Details

Product Name:

YAC Security Protection
Company Name:

Elex do Brasil Participações Ltda
MD5: 406d4425ecfd7baafa0e700f7a2e64fd
Size: 107 KB
First Published: 2017-05-21 03:01:55 (7 years ago)
Latest Published: 2020-11-16 22:49:46 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-11-16 22:49:46 (4 years ago)

Overview

Signed By: Elex do Brasil Participações Ltda
Status: Valid

Common Places:

%programfiles%\elex-tech\yac
%temp%\ist5332.tmp\sys\x64
%temp%\istcc09.tmp\sys\x64
%temp%\istca6f.tmp\sys\x64
%temp%\ist4161.tmp\sys\x64
%temp%\istdc68.tmp\sys\x64
%sysdrive%\adwcleaner\quarantine\files\ttrzbiwbftrphsyswotxgiymvycbwfok\yac
%sysdrive%\adwcleaner\quarantine\files\hnejfgjgzqgwsaagtcjzctwkxkwixhhr\yac
%temp%\isteda.tmp\sys\x64
%temp%\ist6277.tmp\sys\x64

File Names:

iSafeKrnlKit.sys
isafekrnlkit.sys

Geography:

19.7%
16.9%
11.0%
5.9%
5.6%
4.5%
4.5%
4.5%
4.1%
2.7%
2.0%
1.7%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.9%
0.8%
0.8%
0.8%
0.6%
0.6%
0.6%
0.5%
0.5%
0.5%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 7 49.4%
Windows 10 38.3%
Windows 8.1 8.0%
Windows 8 3.5%
Windows XP 0.8%
Windows Vista 0.2%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00018858

PE Sections:

Name Size of data MD5
.text 10752 506de7ffeafc3c1228908486c2008ec9
.rdata 7168 b027b108f0ec17ab1d1b5030de566adc
.data 8704 4b9fad7afa9b55adc10f9711a7a2b37b
.pdata 2560 a89b3ddedc1248774d6cb333c5e4d48c
PAGE 53248 ac9046363a1100a063bf6217306b7e37
INIT 6656 e03722d5196ccf5be83f8c66b154f9c3
.rsrc 1024 4a188039aad34dd57cb594b22defff70
.reloc 512 fc4b020973bf503fc493e1f99f7cd56d

More information:

Search on Virustotal
copyright for information about isafekrnlkit.sys