How to remove HardwareProtectEx.sys
- File Details
- Overview
- Analysis
HardwareProtectEx.sys
The module HardwareProtectEx.sys has been detected as PUP.ChinAd
File Details
Product Name: |
|
MD5: |
bc999ef2f36ff70d992fa3b67e514cfb |
Size: |
717 KB |
First Published: |
2019-08-13 05:43:10 (5 years ago) |
Latest Published: |
2025-04-28 23:01:31 (3 months ago) |
Status: |
PUP.ChinAd (on last analysis) |
|
Analysis Date: |
2025-04-28 23:01:31 (3 months ago) |
Overview
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
Taiwan |
29.9% |
|
China |
26.9% |
|
Singapore |
11.9% |
|
Malaysia |
10.4% |
|
United States |
7.5% |
|
Italy |
4.5% |
|
Hong Kong |
3.0% |
|
Spain |
1.5% |
|
Indonesia |
1.5% |
|
South Korea |
1.5% |
|
Israel |
1.5% |
|
Windows 10 |
92.5% |
|
Windows 7 |
4.5% |
|
Windows 8.1 |
3.0% |
|
Analysis
Subsystem: |
Native |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00010000 |
Entry Address: |
0x00a1703e |
Name |
Size of data |
MD5 |
.text |
37888 |
fa28762031c64d4740c191b4ce712443 |
.rdata |
5632 |
2c948cbe59343e87bb7f5f22b55747ee |
.data |
5632 |
d73fe3f7d5a0318921189dd9738219c6 |
INIT |
2048 |
5ebb77788859b593bd5975e87f5e3419 |
W0 |
652800 |
77a1bcc30c80d90b8ad0ceef60128d97 |
.reloc |
2048 |
268612ffce9ddacfe52f72725b55b175 |
.rsrc |
1536 |
e376313a510e537dc69ddfdc64a1e468 |