Information about qqpchw-x64_ev.sys

qqpchw-x64_ev.sys

File Details

Product Name:

QQPCHW
Company Name:

Tencent
MD5: d47ce72d2b4cbb55596f9903f54744e0
Size: 27 KB
First Published: 2017-05-21 23:07:03 (8 years ago)
Latest Published: 2021-09-21 20:36:24 (3 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2021-09-21 20:36:24 (3 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qqpcmgr\12.5.18755.213
%programfiles%\tencent\qqpcmgr\12.1.18202.223
%programfiles%\qqpcmgr\12.3.18498.501
%programfiles%\tencent\qqpcmgr\12.5.18752.211
%programfiles%\tencent\qqpcmgr\12.3.18483.221
%programfiles%\tencent\qqpcmgr\12.5.18733.301
%programfiles%\tencent\qqpcmgr\12.5.18768.219
%programfiles%\tencent\qqpcmgr\12.4.18584.206
%programfiles%\tencent\qqpcmgr\12.6.18863.209
%programfiles%\qqpcmgr\12.5.18768.219

File Names:

QQPCHW-x64_ev.sys
qqpchw-x64_ev.sys
2EAB.tmp
E37D.tmp
FAEB.tmp

Geography:

41.3%
19.9%
13.6%
5.6%
4.8%
1.9%
1.7%
1.5%
1.3%
1.3%
1.1%
0.9%
0.6%
0.6%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 10 78.7%
Windows 7 11.9%
Windows Server 2012 R2 4.3%
Windows Server 2008 R2 2.2%
Windows 8.1 1.5%
Windows XP 0.6%
Windows 8 0.6%
Windows Server 2016 0.2%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00006064

PE Sections:

Name Size of data MD5
.text 5120 62653cf0058288ffcf8039177fec58bb
.rdata 512 70d7b9f6665914133879df65a003cda7
.data 512 043c46095689123e1f5be96c109c2f46
.pdata 512 63c96cfddaf63513d0614bf2fbbcac58
INIT 1024 91992e0fe6d6dda21b64a25642480af1
.rsrc 1024 8db94fae242d747f3c6aa65e94a3be63

More information:

Search on Virustotal
copyright for information about qqpchw-x64_ev.sys