Information about isafekrnlmon.sys

isafekrnlmon.sys

File Details

Product Name:

YAC Security Protection
Company Name:

Elex do Brasil Participações Ltda
MD5: a22e4fc5e5a801daae7978f87059cc9f
Size: 51 KB
First Published: 2017-05-21 03:01:55 (7 years ago)
Latest Published: 2020-11-16 23:11:26 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-11-16 23:11:26 (4 years ago)

Overview

Signed By: Elex do Brasil Participações Ltda
Status: Valid

Common Places:

%programfiles%\elex-tech\yac
%programfiles%\elex-tech.quarantined\yac
%temp%\ist5332.tmp\sys\x64
%temp%\istcc09.tmp\sys\x64
%temp%\istca6f.tmp\sys\x64
%temp%\ist4161.tmp\sys\x64
%sysdrive%\adwcleaner\quarantine\files\hnejfgjgzqgwsaagtcjzctwkxkwixhhr\yac
%sysdrive%\adwcleaner\quarantine\files\ttrzbiwbftrphsyswotxgiymvycbwfok\yac
%temp%\isteda.tmp\sys\x64
%temp%\istcdd6.tmp\sys\x64

File Names:

iSafeKrnlMon.sys
isafekrnlmon.sys

Geography:

20.3%
16.7%
10.7%
5.8%
5.5%
4.8%
4.6%
4.2%
4.0%
2.4%
1.9%
1.6%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.9%
0.7%
0.7%
0.7%
0.6%
0.6%
0.6%
0.6%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 7 48.7%
Windows 10 39.0%
Windows 8.1 8.0%
Windows 8 3.4%
Windows XP 0.7%
Windows Vista 0.1%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0000a064

PE Sections:

Name Size of data MD5
.text 4096 07caea14a98dd3f72c540d8aceee4575
.rdata 4608 91575007d757ca9f0cb5fee020bc11e2
.data 7168 d5d26f41212c8c7d95d12a21cc7417fc
.pdata 1024 cbcb49c372264ff7d67ee32c7a093256
PAGE 12288 b58f66204e1ea423f79ea64ef9c3d1d0
INIT 3072 1e19f548dde392948fedd7d2d764e742
.rsrc 1024 b021047ed07db7a09727dca9e5bbeb00
.reloc 512 45bfc423a5494a91bd9f63ade6e86345

More information:

Search on Virustotal
copyright for information about isafekrnlmon.sys