How to remove QQSysMonX64_EV.sys
- File Details
- Overview
- Analysis
QQSysMonX64_EV.sys
The module QQSysMonX64_EV.sys has been detected as PUP.Tencent
File Details
Product Name: |
|
Company Name: |
|
MD5: |
8ef7fa616ada12b911765b3b9a12f33c |
Size: |
218 KB |
First Published: |
2018-10-31 04:12:36 (6 years ago) |
Latest Published: |
2019-04-27 09:39:40 (5 years ago) |
Status: |
PUP.Tencent (on last analysis) |
|
Analysis Date: |
2019-04-27 09:39:40 (5 years ago) |
Overview
%programfiles%\tencent\qqpcmgr |
%programfiles%\tencent\qqpcmgr |
%sysdrive%\qqpcmgr |
Windows 10 |
88.9% |
|
Windows Server 2012 R2 |
11.1% |
|
Analysis
Subsystem: |
Native |
PE Type: |
pe |
OS Bitness: |
64 |
Image Base: |
0x0000000000010000 |
Entry Address: |
0x000353c8 |
Name |
Size of data |
MD5 |
.text |
155136 |
b61ebaeb2f0a50acdfee992ad559916e |
.rdata |
11776 |
9c33cdb922b7f7f665ad1f2e0c4722c8 |
.data |
7168 |
146d581666576720c68074c5045d5037 |
.pdata |
5120 |
69c4fa6ac06f16e199330f4b200d15a0 |
PAGE |
1024 |
b1d483120fea79be987878f2a7bfb3ae |
INIT |
7680 |
da2a27789b7a4eb355da077f2937520a |
.rsrc |
1024 |
a83d14e6660bb3610f58403eaaa60119 |
.reloc |
1024 |
1730feb8b2b720321a4249c14c38c8f6 |