How to remove HWDeviceService64.exe.q_Quarantine_E292E05_q
- File Details
- Overview
- Analysis
HWDeviceService64.exe.q_Quarantine_E292E05_q
The module HWDeviceService64.exe.q_Quarantine_E292E05_q has been detected as Service: [hwdeviceservice64.exe] Suspicious service
File Details
Product Name: |
|
MD5: |
f7b44c271ffa4d7ae19cfc113eb7ba32 |
Size: |
331 KB |
First Published: |
2017-10-27 16:06:48 (7 years ago) |
Latest Published: |
2020-09-30 13:30:08 (4 years ago) |
Status: |
Service: [hwdeviceservice64.exe] Suspicious service (on last analysis) |
|
Analysis Date: |
2020-09-30 13:30:08 (4 years ago) |
%allusersprofile%\\application data\datacardservice |
%commonappdata% |
%commonappdata% |
HWDeviceService64.exe |
HWDeviceService64.exe.q_Quarantine_E292E05_q |
Windows 7 |
66.7% |
|
Windows XP |
33.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000140000000 |
Entry Address: |
0x0000c1ac |
Name |
Size of data |
MD5 |
.text |
223232 |
2300b055c856b70307c12c8f0f4107fd |
.rdata |
88064 |
04cb86ba630d80c2bc32b55a5926e99f |
.data |
8192 |
f0f167ac490aed2677b042bf17958aa0 |
.pdata |
14848 |
0fa22c9593ed05558e6d5cdd00d4db62 |
.rsrc |
2048 |
247def46811b9c821ec339bc2a1d4536 |
.reloc |
2048 |
d4e750a27003b771d1e99d92ca3b4357 |