Information about TAOKernelEx_ev.sys

TAOKernelEx_ev.sys

File Details

Company Name:

Tencent Technology(Shenzhen) Company Limited
MD5: 984f808ead905a72f979c8eedd21f66a
Size: 98 KB
First Published: 2017-07-07 12:09:01 (7 years ago)
Latest Published: 2018-11-07 16:12:13 (6 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2018-11-07 16:12:13 (6 years ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.6.18917.801
%programfiles%\tencent\qqpcmgr\12.6.18898.217
%programfiles%\tencent\qqpcmgr\12.7.18987.204
%programfiles%\tencent\qqpcmgr\12.8.19044.206
%programfiles%\tencent\qqpcmgr\12.7.18996.207
%programfiles%\tencent\qqpcmgr\12.8.19060.208
%programfiles%\tencent\qqpcmgr\12.7.18999.208
%programfiles%\tencent\qqpcmgr\12.7.18988.205
%programfiles%\tencent\qqpcmgr\12.8.19066.210
%programfiles%\tencent\qqpcmgr\12.8.19070.212

Geography:

25.6%
22.0%
17.1%
8.5%
4.9%
3.7%
2.4%
2.4%
2.4%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%

OS Version:

Windows 10 67.1%
Windows 7 19.5%
Windows Server 2012 R2 6.1%
Windows Server 2008 R2 3.7%
Windows 8.1 1.2%
Windows XP 1.2%
Windows 8 1.2%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000d000

PE Sections:

Name Size of data MD5
.text 62976 f1fe0f7ffacbc308ecdb5a086d8a9e05
.rdata 2048 dd7167e454172a2e4f73732cd2f0a9ff
.data 7680 acddc1ad742cf1939198a04403ea38ee
INIT 4096 5858cda6100cce20c5a8bf5e203ff8d2
.rsrc 1536 d6417608f0d88b31effad6a6504af125
.reloc 4096 eac6feb1603fc81bb97006647928ebcc

More information:

Search on Virustotal
copyright for information about TAOKernelEx_ev.sys