Information about QQSysMon_EV.sys

QQSysMon_EV.sys

File Details

Product Name:

QQSYSMON
Company Name:

电脑管家
MD5: bd79cdba5387a0446449e2edc658c4e5
Size: 150 KB
First Published: 2017-05-22 11:22:25 (7 years ago)
Latest Published: 2020-08-21 08:36:30 (4 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2020-08-21 08:36:30 (4 years ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.5.18755.213
%programfiles%\tencent\qqpcmgr\12.5.18752.211
%programfiles%\tencent\qqpcmgr\12.5.18768.219
%programfiles%\qqpcmgr\12.5.18768.219
%programfiles%\qqpcmgr\12.6.18848.203
%programfiles%\tencent\qqpcmgr\12.6.18917.801
%programfiles%\tencent\qqpcmgr\12.5.18769.220
%programfiles%\tencent\qqpcmgr\12.6.18898.217
%programfiles%\tencent\qqpcmgr\12.6.18856.206\filegroupupdate\sectionsbackup\9924
%programfiles%\tencent\qqpcmgr\12.6.18848.203

File Names:

QQSysMon_ev.sys
QQSysMon_EV.sys
QQSysMon_ev.sys.bak_

Geography:

21.1%
15.8%
15.8%
10.5%
10.5%
5.3%
5.3%
5.3%
5.3%
5.3%

OS Version:

Windows 10 52.6%
Windows 7 31.6%
Windows 8.1 10.5%
Windows Server 2008 R2 5.3%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00010000
Entry Address: 0x0001e7a5

PE Sections:

Name Size of data MD5
.text 97664 51ade9d11dea11ff4e6d6f638752747c
.rdata 3456 f9db6fdbbec342a3f3368830632b5abe
.data 21888 14bd77911ab40869eb09442daf452322
INIT 5504 d4fd6792e183e10b5edfa2d259f3ec1f
.rsrc 896 fdffde8eea44767f06a3e5e9d972b1e3
.reloc 6400 23c3afe2c26362f9d843713e60e3156f

More information:

Search on Virustotal
copyright for information about QQSysMon_EV.sys