iSafeKrnl.sys
YAC Security Protection
Elex do Brasil Participações Ltda
The file iSafeKrnl.sys, “iSafe Kernel Driver” by Elex do Brasil Participaçõesa has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a Windows 64-bit file system device driver named “iSafeKrnl”.
Product:
YAC Security Protection
Description:
iSafe Kernel Driver
MD5:
bb7cc207a13f3bb43579328ac27d8f8f
SHA-1:
6e9b81e60d4155f140b7261a0ddb9e8d3faf7c15
SHA-256:
f1df84af395564f9ca85d85da17518d573b0e97049104de33384e19b255273c8
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
4/24/2024 7:33:28 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.ElexdoBrasilParticipacoesa.M
14.3.18.14
File size:
190.5 KB (195,072 bytes)
Product version:
3.5.24.5105
Copyright:
Copyright (c) 2011-2013 Elex do Brasil Participações Ltda
Original file name:
iSafeKrnl.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Program Files\isafe\isafekrnl.sys
Authority:
GlobalSign nv-sa
Valid from:
9/23/2013 8:46:21 PM
Valid to:
8/16/2014 11:28:53 PM
Subject:
CN=Elex do Brasil Participações Ltda, O=Elex do Brasil Participações Ltda, L=Consolação, S=São Paulo, C=BR
Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE
Serial number:
11215F51916F2BB9F54E82871FEA88CE8F5E
CTPH (ssdeep):
3072:d1OIb2PPe4lFRWVfO5wa72rNES8jLnZa1gwbYG:bOX5mNUDZa1gY
Driver
Description:
iSafeKrnl Mini-Filter Driver
Type:
File system 'filter' driver (FileSystemDriver)