Information about QQSysMonX64_EV.sys

QQSysMonX64_EV.sys

File Details

Product Name:

QQSYSMON
Company Name:

电脑管家
MD5: ebd6ca210b47a36afd12d996e957f0db
Size: 169 KB
First Published: 2017-08-14 23:07:55 (7 years ago)
Latest Published: 2018-08-25 03:10:28 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-08-25 03:10:28 (6 years ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.7.18996.207
%programfiles%\qqpcmgr\12.7.18996.207
%programfiles%\tencent\qqpcmgr\12.7.18999.208
%programfiles%\tencent\qqpcmgr\12.7.18988.205
%programfiles%\tencent\qqpcmgr\12.6.18898.217
%programfiles%\tencent\qqpcmgr\12.5.18733.301
%programfiles%\tencent\qqpcmgr\12.7.18987.204
%programfiles%\tencent\qqpcmgr\12.6.18856.206
%programfiles%\qqpcmgr\12.7.18988.205
%programfiles%\tencent\qqpcmgr\12.3.18471.217\filegroupupdate\sectionsbackup

File Names:

QQSysMonX64_ev.sys
QQSysMonX64_EV.sys
FC88.tmp
QQSysMonX64_ev.sys.bak_

Geography:

28.9%
21.1%
10.5%
10.5%
5.3%
5.3%
5.3%
5.3%
2.6%
2.6%
2.6%

OS Version:

Windows 10 89.5%
Windows 7 10.5%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0002d3c8

PE Sections:

Name Size of data MD5
.text 124416 de7f57caaec9ddd34c016a9f8a565280
.rdata 10240 0291c45826f0f3b3f83b94ed32e28e54
.data 7168 b74b2199c8fb61688ecbad02b8f5c599
.pdata 4096 5096062e2e29795dbccdb0fd794a8186
PAGE 1024 a679a32e86fd8317a1167d39ab5c44fb
INIT 6656 aa673f6ab969d872da0349256ab6fb86
.rsrc 1024 701a50a70cb9671a7bbf82d76798d088
.reloc 1024 e55df2bf3e97926b6b784e52136ac7da

More information:

Search on Virustotal
copyright for information about QQSysMonX64_EV.sys