Information about AntiRKX64.sys.bak_9888

AntiRKX64.sys.bak_9888

File Details

Product Name:

TAntiRK
Company Name:

Tencent
MD5: 497ebe72cbf3ece078a0a5d087ecef08
Size: 48 KB
First Published: 2017-06-21 13:02:14 (6 years ago)
Latest Published: 2018-07-23 12:12:35 (5 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-07-23 12:12:35 (5 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.2.18329.219\filegroupupdate\sectionsbackup\9208
%programfiles%\tencent\qqpcmgr\11.0.16779.224\filegroupupdate\sectionsbackup\9170
%programfiles%\tencent\qqpcmgr\11.8.17933.216\filegroupupdate\sectionsbackup\9208
%programfiles%\tencent\qqpcmgr\11.7.17791.230
%programfiles%\tencent\qqpcmgr\11.7.17791.230\filegroupupdate\sectionsbackup\9888
%programfiles%\tencent\qqpcmgr\12.3.18471.217\filegroupupdate\sectionsbackup
%programfiles%\tencent\qqpcmgr\11.7.17791.230\filegroupupdate\sections

File Names:

AntiRKX64.sys.bak_
AntiRKX64.sys.bak_9888
AntiRKX64.sys

Geography:

30.8%
30.8%
15.4%
7.7%
7.7%
7.7%

OS Version:

Windows 10 76.9%
Windows 8.1 15.4%
Windows 7 7.7%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0000b064

PE Sections:

Name Size of data MD5
.text 24576 fc9046a534b77f026a4dffd90e92888f
.rdata 2048 7295338a743a005a4a74137f9fc64d18
.data 1024 b288d09cc4048f71f85b117796759cd9
.pdata 1024 e5fe42627f3f262f8c4f1bb226faa146
INIT 2048 bae2e48fe9f7a47b1afa79a735bc84ff
.rsrc 1024 4fc2cf1032ee5e5045cc57466093ef7e
.reloc 512 a967c1a823023064d06460351fad9eb0

More information:

Search on Virustotal
copyright for information about AntiRKX64.sys.bak_9888