Information about AntiRKX64_ev.sys.bak_

AntiRKX64_ev.sys.bak_

File Details

Product Name:

TAntiRK
Company Name:

Tencent
MD5: 34554b8dd7cff5fda35d608a2df9e877
Size: 50 KB
First Published: 2017-05-22 11:22:45 (7 years ago)
Latest Published: 2018-07-23 12:12:43 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-07-23 12:12:43 (6 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.5.18755.213
%programfiles%\tencent\qqpcmgr\11.8.17919.214\filegroupupdate\sections\9486
%programfiles%\qqpcmgr\12.3.18498.501
%programfiles%\tencent\qqpcmgr\12.5.18752.211
%programfiles%\tencent\qqpcmgr\12.3.18483.221
%programfiles%\tencent\qqpcmgr\12.4.18584.206\filegroupupdate\sectionsbackup\9609
%programfiles%\tencent\qqpcmgr\12.2.18329.219\filegroupupdate\sectionsbackup\9668
%programfiles%\tencent\qqpcmgr\11.0.16779.224\filegroupupdate\sectionsbackup\9609
%programfiles%\tencent\qqpcmgr\12.5.18752.211\filegroupupdate\sectionsbackup\9683
%programfiles%\tencent\qqpcmgr\12.5.18752.211\filegroupupdate\sectionsbackup\9609

File Names:

AntiRKX64_ev.sys
AntiRKX64_ev.sys.bak_

Geography:

34.4%
21.9%
12.5%
6.3%
6.3%
3.1%
3.1%
3.1%
3.1%
3.1%
3.1%

OS Version:

Windows 10 59.4%
Windows 8.1 21.9%
Windows 7 18.8%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0000b064

PE Sections:

Name Size of data MD5
.text 24576 fc9046a534b77f026a4dffd90e92888f
.rdata 2048 7295338a743a005a4a74137f9fc64d18
.data 1024 b288d09cc4048f71f85b117796759cd9
.pdata 1024 e5fe42627f3f262f8c4f1bb226faa146
INIT 2048 bae2e48fe9f7a47b1afa79a735bc84ff
.rsrc 1024 4fc2cf1032ee5e5045cc57466093ef7e
.reloc 512 a967c1a823023064d06460351fad9eb0

More information:

Search on Virustotal
copyright for information about AntiRKX64_ev.sys.bak_