How to remove HardwareProtect_x64.sys

HardwareProtect_x64.sys

The module HardwareProtect_x64.sys has been detected as PUP.ChinAd

HardwareProtect_x64.sys
Remove HardwareProtect_x64.

File Details

Product Name:

鲁大师
MD5: d991ab7099bfcf8d47317f3d7899419e
Size: 1 MB
First Published: 2020-07-26 12:37:03 (4 years ago)
Latest Published: 2024-08-08 23:02:08 (9 months ago)
Status: PUP.ChinAd (on last analysis)
Analysis Date: 2024-08-08 23:02:08 (9 months ago)

Overview

Signed By: Chengdu Qilu Technology Co. Ltd.;Microsoft Windows Hardware Compatibility Publisher
Status: Valid

Common Places:

%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%

Geography:

46.2%
19.2%
15.4%
11.5%
7.7%

OS Version:

Windows 10 84.6%
Windows 8.1 7.7%
Windows 7 7.7%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0303b064

PE Sections:

Name Size of data MD5
.text 53248 645ab094b3d00f934b05bd78bd94d5e1
.rdata 6656 8ba9b8a1534f7ffc7a81867420887872
.data 5632 bacb2e94fa1f5fe7b65bd61fde3a0e60
.pdata 1024 9d1935cd8652a9cc1ec0a347d6cb4503
INIT 2048 88192a836db33308052ae0afee7f186e
W0 1358848 42f10379bd9a018f85136bb0b00155a9
.reloc 512 39e352b1247a2550d94f7d29cf6674d2
.rsrc 1536 9f99370602745073ecef96cb22271487

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for HardwareProtect_x64.sys
copyright for information about HardwareProtect_x64.sys