How to remove mwescontroller
- File Details
- Overview
- Analysis
mwescontroller
The module mwescontroller has been detected as PUP.NetFilter
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
93291d64deb2ce9bf3ed5e6dbacfcaba |
| Size: |
56 KB |
| First Published: |
2017-05-21 18:10:01 (6 years ago) |
| Latest Published: |
2020-12-10 19:00:47 (3 years ago) |
| Status: |
PUP.NetFilter (on last analysis) |
|
| Analysis Date: |
2020-12-10 19:00:47 (3 years ago) |
Overview
| %sysdrive%\adwcleaner\quarantine\files\hzubehmzhrpmgztwljfzklwtmnbbsajp\my web shield.zip |
| %system%\drivers |
| %programfiles%\my web shield |
| %sysdrive%\adwcleaner\quarantine\files\ncktryjdwqmdrlhhnisphyxcitrscmfo |
| %sysdrive%\adwcleaner\quarantine\files\ncktryjdwqmdrlhhnisphyxcitrscmfo\my web shield.zip |
| %sysdrive%\adwcleaner\quarantine\files\qhmofbmvbtyhjvzaqgxivcyxhycpkhej |
| %sysdrive%\adwcleaner\quarantine\files\iqztaxpbphnvcxfyhlgykawdhxzhykpv\my web shield.zip |
| %sysdrive%\adwcleaner\quarantine\files\iqztaxpbphnvcxfyhlgykawdhxzhykpv |
| %sysdrive%\adwcleaner\quarantine\files\omwoqutlfkhcohxyzwrltpriobtqlccw\my web shield.zip |
| %commonappdata%\my web shield |
| mwescontroller.sys |
| mwescontroller |
| gwltjhervenwzjnoxyeqjehjqzasaqrd.back |
| _reboot_mwescontroller.sys |
|
19.4% |
|
|
8.8% |
|
|
5.7% |
|
|
4.4% |
|
|
4.1% |
|
|
3.4% |
|
|
3.3% |
|
|
3.1% |
|
|
2.0% |
|
|
1.9% |
|
|
1.8% |
|
|
1.7% |
|
|
1.6% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.3% |
|
|
1.3% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.1% |
|
|
1.1% |
|
|
1.0% |
|
|
1.0% |
|
|
0.9% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 10 |
86.7% |
|
| Windows 8.1 |
12.0% |
|
| Windows 8 |
1.1% |
|
| Windows Server 2012 R2 |
0.2% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x00009c70 |
| Name |
Size of data |
MD5 |
| .text |
38912 |
4b07b227c950784f9dd6d1fee262288a |
| .rdata |
3584 |
c53870aee9370ef7596394f192d416ce |
| .data |
512 |
46379b8ab4e14e93955bb62544c80379 |
| .pdata |
1536 |
f43d04e67f5091226ef20de86ec8be3a |
| INIT |
3584 |
b4af175ecb4dd909a96bb583394504ca |
| .rsrc |
1024 |
caae3d801b01138978a44ea9e7d2b081 |
| .reloc |
512 |
1281db94b2103c76b1d2e8cd56c299f7 |
