Information about TsDefenseBT64.sys

TsDefenseBT64.sys

File Details

Product Name:

TsDefenseBT64
Company Name:

Tencent
MD5: 9d7c94c16a83f8f4574eecd590969266
Size: 28 KB
First Published: 2017-05-22 11:22:40 (7 years ago)
Latest Published: 2023-01-16 23:02:25 (2 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2023-01-16 23:02:25 (2 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.5.18755.213
%programfiles%\tencent\qqpcmgr\11.8.17919.214
%programfiles%\tencent\qqpcmgr\12.1.18202.223
%programfiles%\tencent\qqpcmgr\12.5.18746.501
%programfiles%\qqpcmgr\12.3.18498.501
%programfiles%\tencent\qqpcmgr\12.5.18752.211
%programfiles%\tencent\qqpcmgr\12.3.18483.221
%programfiles%\tencent\qqpcmgr\11.0.16794.227
%programfiles%\tencent\qqpcmgr\12.5.18768.219
%programfiles%\tencent\qqpcmgr\11.1.16908.217

File Names:

TSDefenseBT64.sys
TsDefenseBT64.sys
TSDEFENSEBT64.sys
$RPXYVH8.sys
tsdefensebt64.sys

Geography:

43.0%
16.4%
11.4%
4.4%
3.2%
2.1%
2.0%
2.0%
1.7%
1.5%
1.2%
1.2%
0.9%
0.9%
0.8%
0.8%
0.7%
0.7%
0.5%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 64.1%
Windows 7 25.5%
Windows 8.1 3.7%
Windows Server 2012 R2 2.9%
Windows Server 2008 R2 1.9%
Windows 8 1.3%
Windows XP 0.4%
Windows Server 2016 0.1%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00008064

PE Sections:

Name Size of data MD5
.text 12800 93ba9d27fb53e6ec451e2762ddf0e4f7
.rdata 1536 e9b182897459c56ca4f1cbd7fca808a5
.data 512 d6e884efdea1c7f39856d6b53f8d20c1
.pdata 512 034a8c1736771cfcbc32d0baacde0862
INIT 2048 27f0bba5e04655034547aa3e2849ac48
.rsrc 1024 79aa99bcccc994c599c3e22b49f674bc
.reloc 512 0ff117754c878e1534e813f7e7acfa3b

More information:

Search on Virustotal
copyright for information about TsDefenseBT64.sys