How to remove TesSafe.sys
- File Details
- Overview
- Analysis
TesSafe.sys
The module TesSafe.sys has been detected as PUP.Tencent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7885f23815ec2eeb0af73489f91f0f90 |
| Size: |
1 MB |
| First Published: |
2017-05-21 21:05:30 (6 years ago) |
| Latest Published: |
2019-12-15 10:11:52 (4 years ago) |
| Status: |
PUP.Tencent (on last analysis) |
|
| Analysis Date: |
2019-12-15 10:11:52 (4 years ago) |
Overview
| %windir%\system32 |
| %programfiles%\tencent\qqgame\kof02um |
| %appdata%\tencent\qqgametempest\minigames\kof02um |
| %programfiles%\td\td\tcls\tenprotect |
| %programfiles%\td\td |
| %sysdrive%\腾讯游戏\剑灵_腾讯 |
| %system% |
| %programfiles%\腾讯游戏\使命召唤online\tcls |
| %programfiles%\腾讯游戏\使命召唤online |
| %system% |
|
20.0% |
|
|
17.6% |
|
|
14.1% |
|
|
10.6% |
|
|
5.9% |
|
|
4.7% |
|
|
4.7% |
|
|
3.5% |
|
|
3.5% |
|
|
3.5% |
|
|
2.4% |
|
|
2.4% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
| Windows 10 |
57.0% |
|
| Windows 7 |
30.2% |
|
| Windows 8 |
8.1% |
|
| Windows 8.1 |
4.7% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000000010000 |
| Entry Address: |
0x00206e4b |
| Name |
Size of data |
MD5 |
| .text |
0 |
00000000000000000000000000000000 |
| .rdata |
0 |
00000000000000000000000000000000 |
| .data |
0 |
00000000000000000000000000000000 |
| .pdata |
0 |
00000000000000000000000000000000 |
| INIT |
0 |
00000000000000000000000000000000 |
| .rsrc |
1536 |
b604caeb326b4d22073d2c2b8facad5d |
| .vmp0 |
0 |
00000000000000000000000000000000 |
| .vmp1 |
0 |
00000000000000000000000000000000 |
| .vmp2 |
1082368 |
c063fffb6e648ea46b6fe80a0cc3d7f7 |
| .reloc |
512 |
08ca5ba5b35dfcf614b27d62e985b304 |
