Information about isafekrnlr3.sys

isafekrnlr3.sys

File Details

Product Name:

YAC Security Protection
Company Name:

Elex do Brasil Participações Ltda
MD5: c7129e801982bc831831d2f6dd6fce8b
Size: 101 KB
First Published: 2017-05-21 03:01:55 (7 years ago)
Latest Published: 2020-11-16 22:40:49 (3 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-11-16 22:40:49 (3 years ago)

Overview

Signed By: Elex do Brasil Participações Ltda
Status: Valid

Common Places:

%programfiles%\elex-tech\yac
%programfiles%\elex-tech.quarantined\yac
%temp%\ist5332.tmp\sys\x64
%temp%\istcc09.tmp\sys\x64
%temp%\istca6f.tmp\sys\x64
%temp%\ist4161.tmp\sys\x64
%sysdrive%\adwcleaner\quarantine\files\hnejfgjgzqgwsaagtcjzctwkxkwixhhr\yac
%sysdrive%\adwcleaner\quarantine\files\ttrzbiwbftrphsyswotxgiymvycbwfok\yac
%temp%\isteda.tmp\sys\x64
%temp%\istd3bf.tmp\sys\x64

File Names:

iSafeKrnlR3.sys
isafekrnlr3.sys

Geography:

20.6%
16.7%
10.9%
5.8%
5.5%
4.6%
4.5%
4.5%
3.9%
2.7%
1.8%
1.6%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.9%
0.7%
0.7%
0.7%
0.7%
0.6%
0.6%
0.6%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 7 49.1%
Windows 10 38.7%
Windows 8.1 7.9%
Windows 8 3.4%
Windows XP 0.7%
Windows Vista 0.1%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00018064

PE Sections:

Name Size of data MD5
.text 62464 17d47f132e65ffe3371b2a86aac11f98
.data 6656 5734ef63e71931e52c5a7b7932ba4002
.pdata 2048 ea5d95882f4766ccfc0a5356b1867743
PAGE 9216 de760213f4bbf222fd20ed7bb55f8c38
INIT 2560 d5f1af6e10dea075520e05a1e212870b
.rsrc 1024 8050a432da0d318487f6223da3811a35
.reloc 512 6b709a27fac4e0193c956d3d1f37ceab

More information:

Search on Virustotal
copyright for information about isafekrnlr3.sys