How to remove DrvAgent64.sys
- File Details
- Overview
- Analysis
DrvAgent64.sys
The module DrvAgent64.sys has been detected as PUP.DriverAgent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
8407ddfab85ae664e507c30314090385 |
| Size: |
21 KB |
| First Published: |
2017-10-06 16:04:11 (7 years ago) |
| Latest Published: |
2024-04-10 23:06:13 (10 months ago) |
| Status: |
PUP.DriverAgent (on last analysis) |
|
| Analysis Date: |
2024-04-10 23:06:13 (10 months ago) |
Overview
| %system%\drivers |
| %windir%\temp\driveragent |
| %sysdrive%\system recovery\repair\backup |
| %system% |
| %windir%\temp |
| %sysdrive%\$windows.~bt\newos\windows\syswow64 |
| %sysdrive%\vtroot\harddiskvolume3\windows\syswow64 |
| %sysdrive%\vtroot\harddiskvolume3\windows\temp |
| %sysdrive%\system volume information\systemrestore\frstaging\windows\syswow64 |
| %sysdrive%\windows.old.000\windows\syswow64 |
| DrvAgent64.SYS |
| DrvAgent64.sys |
| C1EED8ABF045D6101EE61D0415D5645CA52E5F7F.SYS |
| $RGBW17V.SYS |
| drvagent64.sys |
| DRVAGENT64.SYS |
| $R6U1QG5.SYS |
|
14.1% |
|
|
7.3% |
|
|
6.3% |
|
|
5.1% |
|
|
4.5% |
|
|
4.4% |
|
|
4.4% |
|
|
4.2% |
|
|
3.6% |
|
|
3.4% |
|
|
3.4% |
|
|
2.5% |
|
|
2.4% |
|
|
2.3% |
|
|
2.1% |
|
|
1.9% |
|
|
1.8% |
|
|
1.5% |
|
|
1.5% |
|
|
1.3% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.1% |
|
|
1.1% |
|
|
1.0% |
|
|
1.0% |
|
|
0.9% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 10 |
64.4% |
|
| Windows 7 |
29.0% |
|
| Windows 8.1 |
5.8% |
|
| Windows 8 |
0.7% |
|
| Windows Embedded 8.1 |
0.1% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000000010000 |
| Entry Address: |
0x00006008 |
| Name |
Size of data |
MD5 |
| .text |
8192 |
e69a7883efa2fff41eb77ea2d0813ce7 |
| .rdata |
1024 |
62e19d4ffb01e7229e383a65d253ede6 |
| .data |
512 |
043c46095689123e1f5be96c109c2f46 |
| .pdata |
512 |
ab654620e5977c608373195438082460 |
| INIT |
1536 |
08781afcef34da09efe1f97044b2326e |
| .rsrc |
1024 |
414e27ee0774a9594ba8034a336699c3 |
