Information about QQSysMon_ev.sys.bak_

QQSysMon_ev.sys.bak_

File Details

Product Name:

QQSYSMON
Company Name:

电脑管家
MD5: 1470dbd27c4217afb33c6979673d8e6c
Size: 144 KB
First Published: 2017-08-16 03:18:16 (7 years ago)
Latest Published: 2018-04-13 09:11:03 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-04-13 09:11:03 (6 years ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.8.19060.208
%programfiles%\tencent\qqpcmgr\12.8.19066.210
%programfiles%\tencent\qqpcmgr\12.8.19070.212
%programfiles%\tencent\qqpcmgr\12.8.19058.801
%programfiles%\tencent\qqpcmgr\12.8.19072.214
%programfiles%\tencent\qqpcmgr\12.8.19072.214\filegroupupdate\sectionsbackup\10252
%programfiles%\tencent\qqpcmgr\12.8.19072.214\filegroupupdate\sectionsbackup
%programfiles%\tencent\qqpcmgr

File Names:

QQSysMon_ev.sys
QQSysMon_ev.sys.bak_
QQSysMon_ev.sys.bak_10294

Geography:

43.5%
17.4%
13.0%
8.7%
8.7%
4.3%
4.3%

OS Version:

Windows 10 73.9%
Windows Server 2012 R2 13.0%
Windows Server 2008 R2 8.7%
Windows 7 4.3%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00010000
Entry Address: 0x0001ce25

PE Sections:

Name Size of data MD5
.text 90624 8e020a35cd59c78253db9346e2cbaa3c
.rdata 3840 d6b845b68765b6dc1bfc1e060af39d16
.data 22016 1efdcdc8d39e6d6d3a66fa39a1920caa
INIT 5632 c5763ba2b4a654ebe1c64f8bc22241e8
.rsrc 896 fc170cc0b4e47768b6bd4fe7bdaaa6af
.reloc 6400 8792e317d7f92dd092847883d1f88478

More information:

Search on Virustotal
copyright for information about QQSysMon_ev.sys.bak_