Information about TFsFltX64_ev.sys

TFsFltX64_ev.sys

File Details

Product Name:

电脑管家
Company Name:

电脑管家
MD5: 178fd58562d701026918812543c4ea1e
Size: 94 KB
First Published: 2017-11-05 04:06:42 (7 years ago)
Latest Published: 2024-07-25 23:01:25 (6 months ago)
Status: Undefined (on last analysis)
Analysis Date: 2024-07-25 23:01:25 (6 months ago)

Overview

Signed By: TENCENT TECHNOLOGY(SHENZHEN) COMPANY LIMITED
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.10.19212.207\filemon\x64
%system%\drivers
%programfiles%\tencent\qqpcmgr\12.10.19266.225\filemon
%programfiles%\tencent\qqpcmgr\12.10.19269.226\filemon
%system%
%programfiles%\tencent\qqpcmgr\12.10.19212.207\filemon
%programfiles%\tencent\qqpcmgr\12.10.19264.224\filemon
%programfiles%\tencent\qqpcmgr\12.12.19416.211\filemon
%programfiles%\tencent\qqpcmgr\12.11.19347.501\filemon
%programfiles%\tencent\qqpcmgr\12.11.19357.218\filemon

Geography:

47.5%
19.5%
13.6%
5.1%
3.6%
2.3%
1.5%
1.3%
1.3%
0.6%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 10 87.6%
Windows 7 6.3%
Windows Server 2012 R2 3.2%
Windows Server 2008 R2 1.5%
Windows XP 0.4%
Windows 8.1 0.4%
Windows 8 0.4%
Windows Server 2016 0.2%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x0002e954

PE Sections:

Name Size of data MD5
.text 56832 afa66ef62a1cbee92f00c7cbf93df08f
.rdata 5632 fa91696c901ac769d8a44804a1a0454c
.data 1024 8995aba081d13212475a5f6602ce37e9
.pdata 2560 9f409cc77b20835f3e46886f9ad4707d
PAGE 3584 e3a37c1c987eb5917e9a5af6f7972937
INIT 7680 697170f0c7423239b96255b7ae2f4d44
.rsrc 1024 e9a43cf78091b80aea5bf3e2ff341abf
.reloc 512 e527c230658c8375c8a212ce7eb4b226

More information:

Search on Virustotal
copyright for information about TFsFltX64_ev.sys