Information about QDAntiDrv64_ev.sys

QDAntiDrv64_ev.sys

File Details

Product Name:

腾讯QQ
Company Name:

Tencent
MD5: da11408a57c0cd6f7d4a7e0dbe7a80b8
Size: 72 KB
First Published: 2019-06-19 05:16:32 (5 years ago)
Latest Published: 2022-08-06 23:50:30 (2 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2022-08-06 23:50:30 (2 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited;Microsoft Windows Hardware Compatibility Publisher
Status: Valid

Common Places:

%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect
%commondir%\tencent\qqprotect

Geography:

49.0%
21.7%
8.4%
3.5%
3.5%
2.1%
2.1%
2.1%
1.4%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%
0.7%

OS Version:

Windows 10 93.8%
Windows 7 3.5%
Windows Server 2008 R2 1.4%
Windows Server 2012 R2 0.7%
Windows 8.1 0.7%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0000f064

PE Sections:

Name Size of data MD5
.text 44544 49783ab7a51592736e752ccf47bbd264
.rdata 3584 834153622d18d5fcf366a4c65d4d012f
.data 1024 6d3f05c7040bd419ddaadfc2dc81e1af
.pdata 1536 574d39ca353fe7004ee0c40a255974b5
INIT 3072 6fed6791e3d5c25b24e214d1ce6ffd43
.rsrc 1024 5f74e4218ad19f717552d2dc76ff8f55
.reloc 512 7507fa76087f4df530f4b128e7f8da0f

More information:

Search on Virustotal
copyright for information about QDAntiDrv64_ev.sys