home

kimul64.drv

Kaspersky Anti-Virus

Kaspersky Lab

Publisher:
AO Kaspersky Lab  (signed by Kaspersky Lab)

Product:
Kaspersky Anti-Virus

Description:
Kernel heuristics engine

Version:
0.0.0.46

MD5:
a8f061d58892bc4273a7c7c9512c7f6e

SHA-1:
c211d4a6bd2e81a9770a1f8c7d11d19625469464

SHA-256:
3e5f1b39a1ff9bb49993cd81f63c6f22850d69b278c175989e86897854912250

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:19:22 PM UTC  (today)

File size:
85.5 KB (87,584 bytes)

Product version:
13.0.1.15

Copyright:
© 2017 AO Kaspersky Lab. All Rights Reserved.

Trademarks:
Registered trademarks and service marks are the property of their respective owners

Original file name:
kimul.sys

Language:
English (United States)

Common path:
C:\ProgramData\kasperskylab\adminkit\1103\$ftcltmp\81b4a90d-35c2-4f53-87a7-89d1d15df6cc.package\destination.mc\updates\kdb\i386\win\kimul64.drv

Digital Signature
Signed by:
Kaspersky Lab

Authority:
DigiCert Inc

Valid from:
10/7/2015 7:00:00 PM

Valid to:
10/24/2018 7:00:00 AM

Subject:
CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, S=Moscow City, C=RU

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F668FB0F0F002B774C7DDBD769EE5B1

File PE Metadata
Compilation timestamp:
2/6/2017 6:09:33 AM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
14.0

Entry address:
0x14000

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 17, 00, 00, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, 3E, FA, FE, FF, CC, CC, 48, 8B, 05, CD, CF, FF, FF, 48, 85, C0, 74, 1A, 48, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 3B, C1, 74, 0B, 48, F7, D0, 48, 89, 05, B7, CF, FF, FF, C3, B9, 06, 00, 00, 00, CD, 29, CC, CC, CC, 88, 40, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7A, 42, 01, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
26 KB (26,624 bytes)

Scan kimul64.drv - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.