Information about QMUdisk64_ev.sys.bak_

QMUdisk64_ev.sys.bak_

File Details

Product Name:

电脑管家
Company Name:

Tencent
MD5: 185694875a1838b136870b66fbb6d64b
Size: 231 KB
First Published: 2017-08-16 03:19:30 (7 years ago)
Latest Published: 2018-07-23 12:12:48 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-07-23 12:12:48 (6 years ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.7.18988.205
%programfiles%\tencent\qqpcmgr\12.7.18996.207\filegroupupdate\sectionsbackup\10035
%programfiles%\qqpcmgr\12.7.18988.205\filegroupupdate\sectionsbackup\10035
%programfiles%\tencent\qqpcmgr\12.7.18987.204\filegroupupdate\sectionsbackup\10035
%programfiles%\tencent\qqpcmgr\12.7.18996.207\filegroupupdate\sectionsbackup\10062
%programfiles%\tencent\qqpcmgr\11.5.17490.219\filegroupupdate\sectionsbackup
%programfiles%\tencent\qqpcmgr\12.3.18471.217\filegroupupdate\sectionsbackup
%programfiles%\tencent\qqpcmgr\11.7.17791.230\filegroupupdate\sectionsbackup
%programfiles%\tencent\qqpcmgr\11.7.17791.230\filegroupupdate\sections

File Names:

QMUdisk64_ev.sys
QMUdisk64_ev.sys.bak_

Geography:

35.3%
29.4%
11.8%
11.8%
5.9%
5.9%

OS Version:

Windows 10 88.2%
Windows 7 11.8%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00039064

PE Sections:

Name Size of data MD5
.text 157696 b2d0da2d110fc7bb82b27d38c4c2440f
.rdata 19968 cf41a824dfd8233067f891f708d15d40
.data 29696 d19fbe5fc491f30241971de66e8a6928
.pdata 4608 11d46d2f405f73babd28fcdb4a023b4f
INIT 5120 d108519e54b6ae0b2887006b3239e670
.rsrc 1024 f4ef32edf291cbf53fad539b2c224223
.reloc 512 52bd5b5c85da4ab93502c589953ce6fd

More information:

Search on Virustotal
copyright for information about QMUdisk64_ev.sys.bak_