How to remove drv64.exe
drv64.exe
The module drv64.exe has been detected as Adware.Kuaiba
File Details
| MD5: | 2fb4b755ba2e98ca459d420d34b3e3d7 |
| Size: | 189 KB |
| First Published: | 2017-05-21 04:02:52 (8 years ago) |
| Latest Published: | 2023-01-04 23:18:54 (2 years ago) |
| Status: | Adware.Kuaiba (on last analysis) | |
| Analysis Date: | 2023-01-04 23:18:54 (2 years ago) |
Overview
| Signed By: | 深圳市猫哈网络科技发展有限公司 |
| Status: | Valid |
Common Places:
| %programfiles%\maoha\maohaap\drv64 |
| %sysdrive%\adwcleaner\quarantine\files\hqwcouoiidlkcdajrpouhcgvlpxpqmpq\maohaap\drv64 |
| %programfiles%\greatmaker\maohawifi\drv64 |
| %programfiles%\greatmaker\maohawifi |
| %programfiles%\maoha\maohaap |
| %sysdrive%\adwcleaner\quarantine\files\ydnmbaqijnfabvujyxwxbtqpmxdpfwxp\maohaap |
| %localappdata%\maoha\maohaap |
| %sysdrive%\adwcleaner\quarantine\rqf69azbla\maohaap |
| %sysdrive%\adwcleaner\quarantine\files\xbzpuoqckzzskvdyctdxxxboqznebgjr\maohawifi |
| %programfiles%\maoha\maohaap |
Geography:
| Vietnam | 28.6% | |
| Indonesia | 25.0% | |
| Taiwan | 8.8% | |
| Thailand | 7.2% | |
| Turkey | 6.3% | |
| Iran | 4.0% | |
| South Korea | 1.6% | |
| Russia | 1.6% | |
| Japan | 1.4% | |
| Bulgaria | 1.3% | |
| Romania | 0.9% | |
| Poland | 0.7% | |
| India | 0.7% | |
| China | 0.7% | |
| Hong Kong | 0.7% | |
| Greece | 0.7% | |
| Mexico | 0.5% | |
| Chile | 0.5% | |
| Italy | 0.5% | |
| Ukraine | 0.5% | |
| Syria | 0.4% | |
| Singapore | 0.4% | |
| Tunisia | 0.4% | |
| Czech Republic | 0.4% | |
| Algeria | 0.4% | |
| Costa Rica | 0.4% | |
| Brazil | 0.4% | |
| Iraq | 0.4% | |
| Guatemala | 0.4% | |
| Philippines | 0.4% | |
| Spain | 0.4% | |
| Colombia | 0.4% | |
| Hungary | 0.2% | |
| Saudi Arabia | 0.2% | |
| Canada | 0.2% | |
| Uruguay | 0.2% | |
| Latvia | 0.2% | |
| Morocco | 0.2% | |
| Denmark | 0.2% | |
| Egypt | 0.2% | |
| United States | 0.2% | |
| Slovenia | 0.2% | |
| Serbia | 0.2% | |
| Mauritius | 0.2% | |
| Argentina | 0.2% | |
| Belgium | 0.2% | |
| Belarus | 0.2% | |
| Mongolia | 0.2% | |
| Venezuela | 0.2% | |
| Ecuador | 0.2% |
OS Version:
| Windows 7 | 71.7% | |
| Windows 8.1 | 14.4% | |
| Windows 10 | 10.3% | |
| Windows 8 | 2.7% | |
| Windows XP | 0.7% | |
| Windows Server 2008 R2 | 0.2% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x0000bcc4 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 134656 | a09516d7696300dd6fe23fb3d14408a2 |
| .rdata | 36352 | f7c84b654697570620e9a8f84cbf6bf5 |
| .data | 6144 | 145b5588747a8abe9a01b6301b926099 |
| .pdata | 8192 | 96c0d5d48389164c58cdb99cc4d533ab |
| .rsrc | 512 | b004e59c0b970037c56492506d99a73e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for drv64.exe
