Information about $RVWLXTE.sys

$RVWLXTE.sys

File Details

Product Name:

QQPCHW
Company Name:

Tencent
MD5: f6d084403f8bb63e51ebd59f4159e0f9
Size: 16 KB
First Published: 2017-05-22 11:22:54 (8 years ago)
Latest Published: 2021-09-21 20:41:36 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2021-09-21 20:41:36 (4 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.5.18755.213
%programfiles%\tencent\qqpcmgr\11.8.17919.214
%programfiles%\tencent\qqpcmgr\12.1.18202.223
%programfiles%\qqpcmgr\12.3.18498.501
%programfiles%\tencent\qqpcmgr\12.5.18752.211
%programfiles%\tencent\qqpcmgr\12.3.18483.221
%programfiles%\tencent\qqpcmgr\11.0.16794.227
%programfiles%\tencent\qqpcmgr\12.5.18768.219
%programfiles%\tencent\qqpcmgr\11.1.16908.217
%programfiles%\tencent\qqpcmgr\12.4.18584.206

File Names:

QQPCHW-x64.sys
$RVWLXTE.sys
9DE8.tmp

Geography:

34.8%
18.9%
10.0%
4.3%
3.1%
2.9%
2.9%
2.8%
2.2%
2.0%
1.8%
1.6%
1.4%
1.4%
1.2%
0.8%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 10 49.7%
Windows 7 31.9%
Windows Server 2012 R2 6.3%
Windows 8.1 5.1%
Windows Server 2008 R2 4.7%
Windows 8 1.4%
Windows XP 1.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00006064

PE Sections:

Name Size of data MD5
.text 5120 62653cf0058288ffcf8039177fec58bb
.rdata 512 70d7b9f6665914133879df65a003cda7
.data 512 043c46095689123e1f5be96c109c2f46
.pdata 512 63c96cfddaf63513d0614bf2fbbcac58
INIT 1024 91992e0fe6d6dda21b64a25642480af1
.rsrc 1024 8db94fae242d747f3c6aa65e94a3be63

More information:

Search on Virustotal
copyright for information about $RVWLXTE.sys