Information about AntiRKX64.sys.bak_

AntiRKX64.sys.bak_

File Details

Product Name:

TAntiRK
Company Name:

Tencent
MD5: 31404621f995f7168132ac44efa90451
Size: 61 KB
First Published: 2017-06-06 16:04:45 (7 years ago)
Latest Published: 2018-07-23 12:12:51 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-07-23 12:12:51 (6 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.5.18768.219
%programfiles%\tencent\qqpcmgr\12.4.18584.206
%system%\drivers
%programfiles%\tencent\qqpcmgr\10.8.16208.227
%programfiles%\qqpcmgr\12.5.18768.219
%programfiles%\tencent\qqpcmgr\12.2.18329.219
%programfiles%\tencent\qqpcmgr\11.8.17919.214\filegroupupdate\sections\9683
%programfiles%\tencent\qqpcmgr\11.0.16779.224
%programfiles%\qqpcmgr\12.6.18848.203\filegroupupdate\sectionsbackup\9761
%programfiles%\tencent\qqpcmgr\12.5.18769.220\filegroupupdate\sections\9683

File Names:

AntiRKX64.sys
AntiRKX64.sys.bak_

Geography:

32.5%
15.0%
12.5%
10.0%
5.0%
5.0%
5.0%
2.5%
2.5%
2.5%
2.5%
2.5%
2.5%

OS Version:

Windows 7 45.0%
Windows 10 37.5%
Windows 8.1 17.5%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0000f064

PE Sections:

Name Size of data MD5
.text 37888 706d6295e7e3f0df5eaf73f92445dd2a
.rdata 2560 eec4ec08eef8173a743c3d02c6def50f
.data 1024 a29789e835644d9eab4fd0213dfa55da
.pdata 1024 e77d82c888b95717396c209e7f298946
INIT 2048 84e36d9aec4bd90019b4b9215b91a460
.rsrc 1024 aaede271d99203ef5f2bb99611d1063a
.reloc 512 857ccd4ee63a53a6b3d7eb79723da5d2

More information:

Search on Virustotal
copyright for information about AntiRKX64.sys.bak_