How to remove tessafe.sys

tessafe.sys

The module tessafe.sys has been detected as PUP.Tencent

tessafe.sys
Remove tessafe.sys

File Details

Product Name:

Loader64
Company Name:

TENCENT
MD5: 581f54112eb982ba39b26232d4768d81
Size: 532 KB
First Published: 2019-08-05 08:14:02 (6 years ago)
Latest Published: 2025-04-03 23:01:41 (5 months ago)
Status: PUP.Tencent (on last analysis)
Analysis Date: 2025-04-03 23:01:41 (5 months ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%system%
%system%
%system%
%system%
%system%
%system%
%system%
%system%
%system%
%system%

Geography:

14.5%
11.2%
8.5%
7.5%
6.4%
5.4%
4.4%
3.7%
2.9%
2.3%
2.3%
2.3%
1.9%
1.7%
1.7%
1.5%
1.5%
1.5%
1.0%
1.0%
0.8%
0.8%
0.8%
0.8%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 7 75.0%
Windows 8.1 22.6%
Windows 8 1.4%
Windows 10 0.6%
Windows Embedded 8.1 0.4%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00024064

PE Sections:

Name Size of data MD5
.text 118784 ee610ab8d0c87c5fea706fe60af562b6
.rdata 6144 f38f52339976f76588235af09ad30843
.data 2048 cabefd4c47c6659deb2f19a90bb94d5a
.pdata 4608 c88e70321f2d44d1fd39aca46bf5cb97
INIT 3584 6d2ae53fa3f10de5fa6f44137cdfa4c2
.rsrc 1536 b6a54152d64dfeb0808232d4d9939815
.vmp0 512 e8b9491e9730626af2f21d845d94af49
.vmp1 382464 18857950a51785e615bca2e516cd7182
.reloc 512 57d7f0c9f1881e16ff3eb1fb4180fa55

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for tessafe.sys
copyright for information about tessafe.sys