home

mfeelamk.sys

SYSCORE

Microsoft Corporation

Publisher:
McAfee, Inc.  (signed by Microsoft Corporation)

Product:
SYSCORE

Description:
McAfee ELAM Driver

Version:
SYSCORE.15.1.0.518

MD5:
4612b4665278abb170decec55a25488f

SHA-1:
08ac6f6d41460a9d44b6ae2feb7b3b8d5c0b4b8f

SHA-256:
96239eb555650f1ea587ea348874cb8700dd0d18189feaec08142d7efa87f419

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 10:45:34 PM UTC  (today)

File size:
57.4 KB (58,744 bytes)

Copyright:
Copyright© 1995-2012 McAfee, Inc. All Rights Reserved.

File type:
Driver (Win32 SYS)

Language:
Language Neutral

Common path:
C:\Program Files\common files\mcafee\vscore\mfeelamk.sys

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/11/2011 1:39:42 PM

Valid to:
7/11/2012 1:49:42 PM

Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108217B000000000006

File PE Metadata
Compilation timestamp:
5/30/2012 8:40:37 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
1536:MhmlgUOKHYBmJPD4LzvtnL0ZuZjZVY/tiV:MhmeqHYBmB4fvxL0urYEV

Entry address:
0x2032

Entry point:
55, 8B, EC, 83, EC, 0C, 53, 56, 57, BE, 68, A7, 40, 00, 56, BF, 59, 00, 00, C0, E8, 67, E3, FF, FF, E8, 70, 8A, 00, 00, 89, 35, E0, A2, 40, 00, 8B, 75, 08, 83, 25, 80, A7, 40, 00, 00, 56, E8, 0B, 8D, 00, 00, E8, 25, 40, 00, 00, 3D, 84, 17, 00, 00, 0F, 8C, ED, 01, 00, 00, E8, 75, 33, 00, 00, C7, 46, 34, F9, 1F, 40, 00, 83, C7, 41, E8, 26, 40, 00, 00, 85, C0, 6A, 02, 5B, 74, 0D, E8, 1A, 40, 00, 00, 3B, C3, 0F, 85, FE, 01, 00, 00, 68, 6D, 66, 65, 78, 6A, 3C, 6A, 00, FF, 15, B8, 7F, 40, 00, 85, C0, A3, C4, A7...
 
[+]

Entropy:
6.4459

Developed / compiled with:
Microsoft Visual C++

Code size:
33.3 KB (34,112 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.