wayprotect64.sys

WayProtect

Btra Away Ltda - ME

It runs as a Windows 64-bit kernel mode device driver named “WayProtect”.
Publisher:
Btra Away Ltda  (signed by Btra Away Ltda - ME)

Product:
WayProtect

Description:
WayProtect Driver

Version:
2.0.4

MD5:
cd29f8769a7bbf0e6e9b4a87ddd16d2a

SHA-1:
2c587a5594dade65a4962cf29fd379bf1c4fe29f

SHA-256:
05340d7ee5b647371bcf38297fe65f166e6ab20a076fd0c1761c62fe5ffd057d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 9:18:05 AM UTC  (today)

File size:
1 MB (1,049,344 bytes)

Product version:
2.0.00

Copyright:
Copyright (C) 2016

Original file name:
wayprotect.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
10/21/2016 10:00:00 PM

Valid to:
10/25/2017 9:59:59 PM

Subject:
CN=Btra Away Ltda - ME, O=Btra Away Ltda - ME, L=Maraba, S=Para, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7EE14C250E00CD2D0B5763E48646691C

File PE Metadata
Compilation timestamp:
2/7/2017 12:01:06 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
12.0

Entry address:
0x212202

Entry point:
68, 0E, 66, 21, 40, E8, AB, F2, 01, 00, 00, 00, 45, 78, 46, 72, 65, 65, 50, 6F, 6F, 6C, 57, 69, 74, 68, 54, 61, 67, 00, 0F, 86, 53, F9, FF, FF, 48, 81, EA, 08, 00, 00, 00, E9, F4, 7E, FF, FF, CD, 59, 18, C7, 17, 7E, 86, FC, 8A, DC, 1D, 20, BA, AD, EB, E2, A2, 4E, 9D, FF, 5C, F2, 4C, EC, F3, 48, 3A, 37, AD, 62, D0, 28, F1, 64, 7B, 9B, 39, 39, D0, 12, 42, F2, 8C, A2, 9E, D7, 58, 1F, 3B, E0, EB, 65, BC, E8, 40, 8E, 16, 8E, FE, 65, 9B, 36, 5B, A8, C8, BC, 4C, 3F, 62, 2F, 69, AA, 12, 12, 27, 64, F7, CD, B7, 88...
 
[+]

Code size:
28 KB (28,672 bytes)

Driver
Display name:
WayProtect

Type:
Kernel device driver (KernelDriver)


The file wayprotect64.sys has been discovered within the following program.

MuAwaY  by MuAwaY
www.muaway.net
About 1% of users remove it
 
Powered by Should I Remove It?

Scan wayprotect64.sys - Powered by Reason Core Security