How to remove WinRing0x64.sys

WinRing0x64.sys

The module WinRing0x64.sys has been detected as Suspicious Object

WinRing0x64.sys
Remove WinRing0x64.sys

File Details

MD5: 1c57d067b9fc5e9ef9aeb14223481243
Size: 32 KB
First Published: 2023-01-29 23:12:29 (3 years ago)
Latest Published: 2025-10-28 23:01:51 (6 months ago)
Status: Suspicious Object (on last analysis)
Analysis Date: 2025-10-28 23:01:51 (6 months ago)

Overview

Signed By: NetEase(Hangzhou) Network Co. Ltd.;NetEase (Hangzhou) Network Co. Ltd.;Microsoft Windows Hardware Compatibility Publisher
Status: Valid

Common Places:

%temp%
%temp%
%temp%
%temp%
%temp%
%temp%
%temp%
%temp%
%temp%
%temp%

Geography:

40.0%
20.0%
10.0%
10.0%
10.0%
10.0%

OS Version:

Windows 10 80.0%
Windows 8.1 20.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x000011a0

PE Sections:

Name Size of data MD5
.text 2048 e6331ccd3477c916c67e7ef058508d7b
.rdata 1536 a8f32f9ae0a87bde6e0c4fbb05fbb899
.data 512 836c0e71c99c8f8cca81c897119ca6a2
.pdata 512 4f016c840ab66253cc39ec78dcf82861
INIT 1024 7416a935fdf791cb16f1741b4d186b45
.reloc 512 a93352efb14f033b6f5d66deb8f34b2e

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for WinRing0x64.sys
copyright for information about WinRing0x64.sys