Information about QMUdisk64_ev.sys.bak_

QMUdisk64_ev.sys.bak_

File Details

Product Name:

电脑管家
Company Name:

Tencent
MD5: c869a8f5f968e89519ca68b41454fb1d
Size: 238 KB
First Published: 2017-09-20 11:04:48 (7 years ago)
Latest Published: 2018-07-23 12:12:06 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-07-23 12:12:06 (6 years ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.8.19072.214
%programfiles%\tencent\qqpcmgr\12.7.18996.207
%programfiles%\tencent\qqpcmgr\12.5.18733.301
%programfiles%\tencent\qqpcmgr\10.8.16208.227
%programfiles%\tencent\qqpcmgr\12.7.18996.207\filegroupupdate\sectionsbackup\10179
%programfiles%\tencent\qqpcmgr\12.8.19066.210\filegroupupdate\sectionsbackup\10179
%programfiles%\tencent\qqpcmgr\12.6.18856.206\filegroupupdate\sectionsbackup\10179
%programfiles%\tencent\qqpcmgr\12.7.18987.204\filegroupupdate\sectionsbackup\10179
%programfiles%\tencent\qqpcmgr\12.8.19072.214\filegroupupdate\sectionsbackup\10179
%programfiles%\tencent\qqpcmgr\11.5.17490.219\filegroupupdate\sectionsbackup

File Names:

QMUdisk64_ev.sys
QMUdisk64_ev.sys.bak_

Geography:

20.0%
16.0%
12.0%
12.0%
8.0%
8.0%
8.0%
4.0%
4.0%
4.0%
4.0%

OS Version:

Windows 10 88.0%
Windows XP 4.0%
Windows Server 2008 R2 4.0%
Windows 7 4.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0003c064

PE Sections:

Name Size of data MD5
.text 165376 7ff224ab20d55bcfef3937b87cd9492f
.rdata 19968 41f95f1d87dbe5c339c25055e62533d7
.data 29696 5e74ec814d1f7db846d55c384e2ee8e9
.pdata 4608 268f5f1d9ff33f0ecd184632543e5545
INIT 5120 cacee694db03e2b0f16b35f44fc1bf04
.rsrc 1024 8c9bb4a398ee7a5c4d2da13b4b724159
.reloc 512 1039503d15815c78db64a2b6ea9076d8

More information:

Search on Virustotal
copyright for information about QMUdisk64_ev.sys.bak_