How to remove tessafe.sys
- File Details
- Overview
- Analysis
tessafe.sys
The module tessafe.sys has been detected as PUP.Tencent
File Details
Product Name: |
|
Company Name: |
|
MD5: |
c1b029c4a100d681a58d23423d0b99d9 |
Size: |
970 KB |
First Published: |
2017-05-21 03:01:55 (7 years ago) |
Latest Published: |
2018-12-21 18:13:56 (6 years ago) |
Status: |
PUP.Tencent (on last analysis) |
|
Analysis Date: |
2018-12-21 18:13:56 (6 years ago) |
Overview
%windir%\system32 |
%system% |
%system% |
|
22.1% |
|
|
20.6% |
|
|
19.1% |
|
|
13.2% |
|
|
7.4% |
|
|
5.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
1.5% |
|
|
1.5% |
|
Windows 7 |
91.2% |
|
Windows 8.1 |
5.9% |
|
Windows 10 |
1.5% |
|
Windows 8 |
1.5% |
|
Analysis
Subsystem: |
Native |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000000010000 |
Entry Address: |
0x000eb9aa |
Name |
Size of data |
MD5 |
.text |
0 |
00000000000000000000000000000000 |
.rdata |
0 |
00000000000000000000000000000000 |
.data |
0 |
00000000000000000000000000000000 |
.pdata |
0 |
00000000000000000000000000000000 |
INIT |
0 |
00000000000000000000000000000000 |
.rsrc |
1536 |
e7a42d5e7dfef3c9539bd93846281f01 |
.vmp0 |
0 |
00000000000000000000000000000000 |
.vmp1 |
0 |
00000000000000000000000000000000 |
.vmp2 |
960000 |
a4e47fe4c0c37d97fb152244f585e8b9 |
.reloc |
512 |
ee1dad7f6a12740796179d612c08d35d |