Information about webshieldfilter.sys

webshieldfilter.sys

File Details

Product Name:

Windows (R) Win 7 DDK driver
Company Name:

Windows (R) Win 7 DDK provider
MD5: 2e0798cd34789f6170e6e85d605655e7
Size: 85 KB
First Published: 2018-11-17 01:11:28 (5 years ago)
Latest Published: 2020-11-21 19:05:51 (3 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-11-21 19:05:51 (3 years ago)

Overview

Signed By: Protected Antivirus Limited;Microsoft Windows Hardware Compatibility Publisher
Status: Valid

Common Places:

%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10
%programfiles%\totalav\urldrv\wfp\windows10

Geography:

19.3%
7.7%
7.1%
6.3%
4.8%
4.5%
4.5%
4.2%
3.0%
2.7%
2.4%
2.4%
2.1%
1.8%
1.5%
1.5%
1.5%
1.2%
1.2%
1.2%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 80.9%
Windows 7 12.8%
Windows 8.1 4.6%
Windows Server 2008 R2 0.6%
Windows Vista 0.3%
Windows Server 2016 0.3%
Windows 8 0.3%
Windows XP 0.3%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000e39c

PE Sections:

Name Size of data MD5
.text 55296 e2b4c77d237703303b9961d22bb352c8
.rdata 2560 2bf54221867ed408de8590020c3bc08b
.data 1024 79115c09895999a9c149ba1d35ae7886
INIT 3584 3b3da68854bc41ba1099bf713b0bfa63
.rsrc 1536 c085f2b3f5cfec68ae8dac279bdcd202
.reloc 4608 6689e9b9e2a3774094e381eb261c2834

More information:

Search on Virustotal
copyright for information about webshieldfilter.sys