How to remove QQSysMonX64.sys
- File Details
- Overview
- Analysis
QQSysMonX64.sys
The module QQSysMonX64.sys has been detected as PUP.Tencent
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a89bfa4a99c02ad0ce28f5604cde5592 |
| Size: |
134 KB |
| First Published: |
2017-06-27 15:05:13 (6 years ago) |
| Latest Published: |
2018-03-06 15:14:49 (6 years ago) |
| Status: |
PUP.Tencent (on last analysis) |
|
| Analysis Date: |
2018-03-06 15:14:49 (6 years ago) |
Overview
| %programfiles%\tencent\qqpcmgr\11.0.16779.224 |
| %programfiles%\fifa online 3\components\boostup |
| %programfiles%\tencentgames\fifa online 3\components |
| $R0FRAL6.sys |
| QQSysMonX64.sys |
| Windows 10 |
66.7% |
|
| Windows 7 |
33.3% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000000010000 |
| Entry Address: |
0x000263c8 |
| Name |
Size of data |
MD5 |
| .text |
99840 |
71162e0f46aac99ce50db357c8e4a82d |
| .rdata |
8704 |
5087e9ff2e00beefb91d4b58212cb880 |
| .data |
6656 |
74daedf038fdd55458aa905f4f38eb81 |
| .pdata |
3584 |
01986101c6f4a7726e339bc4ba0432be |
| PAGE |
1024 |
48e5585878947b2465eaf36dbc660609 |
| INIT |
6144 |
8908a2f250694990af2b7530252a6a9f |
| .rsrc |
1024 |
0f907f3ce8f147778933e7437f674f50 |
| .reloc |
1024 |
ca67065aa26f202478e5d94a48a9f275 |
