How to remove HWifiNetPro64.SYS
- File Details
- Overview
- Analysis
HWifiNetPro64.SYS
The module HWifiNetPro64.SYS has been detected as Rootkit.Gen
File Details
| MD5: |
a408470c15144f871bc44e6541fe1f3c |
| Size: |
143 KB |
| First Published: |
2017-05-21 19:02:00 (6 years ago) |
| Latest Published: |
2020-12-10 03:59:47 (3 years ago) |
| Status: |
Rootkit.Gen (on last analysis) |
|
| Analysis Date: |
2020-12-10 03:59:47 (3 years ago) |
Overview
| %localappdata%\hwifisvc |
| %localappdata%\owifisvc |
| %programfiles%\hotspot |
| %localappdata% |
| %profile%\acek\ustawienia lokalne\dane aplikacji |
| %programfiles% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| %localappdata% |
| HWifiNetPro64.sys |
| HWifiNetPro64.SYS |
| hwifinetpro64.sys |
|
18.9% |
|
|
6.3% |
|
|
6.3% |
|
|
6.3% |
|
|
5.3% |
|
|
4.2% |
|
|
4.2% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
3.2% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
| Windows 7 |
49.0% |
|
| Windows 10 |
41.7% |
|
| Windows 8.1 |
5.2% |
|
| Windows Vista |
3.1% |
|
| Windows XP |
1.0% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x000013a0 |
| Name |
Size of data |
MD5 |
| .text |
50688 |
2328b678bf2c6d5d848360859b6e832f |
| .text1 |
1024 |
107fe645a76d65fd7b8366a1d180845d |
| .rdata |
8192 |
55ee8f9c96c8d56c19cdb13f4b53acda |
| .data |
48128 |
d38d66bb185956150a874da4a379a55b |
| .pdata |
3584 |
23d3f79d64ec87aaadab2b95f822929e |
| INIT |
2560 |
2330973b5415ba9574c4d4166437e848 |
| .vmp0 |
3584 |
1e8dbe78f627ae62d0f1b02ac6365865 |
| .reloc |
512 |
f20c76954dfb23abdfe8f1892492e447 |
| .rsrc |
512 |
b8f4b2fbb70fd69bf66c685ef0fb57fd |
