Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
7ba85bc62fb39bd9cc6a783d7ee179fe.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ba85bc62fb39bd9cc6a783d7ee179fe.dll
Resource
win10v2004-20231222-en
Target
7ba85bc62fb39bd9cc6a783d7ee179fe
Size
669KB
MD5
7ba85bc62fb39bd9cc6a783d7ee179fe
SHA1
9ecf106e32aafbbf4810a1c0c82b1af8535c1a2c
SHA256
f124bffe06ad7018fd9dc933005151c13c68319602b80f5dcfe95c3e65e38cfc
SHA512
a5225747fc4feb2e9c665d3af4b52ac5d41854fad7b8b311502b2a1648b2d40c08a2f8e06454c6c4c0400ef89ba5aedec8543c00f466aa3bca0c1a38bc390167
SSDEEP
12288:XXmsm8Kp177tq/BnOz3grv/eWa28+mt3q5tTsWlodwSaA9qnuRzE:XWs437tq/BnOyv/eWa28+mhqXTsUhA9I
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\qqpcmgr_proj\QQPCMgr_safe_6.0Beta3\Basic\Output\BinFinal\plugins\RtpCommon.pdb
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ntohl
htonl
PathAddBackslashW
PathRemoveFileSpecW
PathIsDirectoryW
SHDeleteValueW
SHGetValueW
wnsprintfW
PathAppendW
PathFileExistsW
PathFindFileNameW
SHSetValueW
LockFileEx
Sleep
QueryPerformanceCounter
GetDiskFreeSpaceW
CloseHandle
FormatMessageW
GetVersionExW
LoadLibraryA
DeleteFileW
GetFullPathNameW
GetCurrentProcessId
InterlockedCompareExchange
GetFileAttributesA
GetFullPathNameA
UnlockFile
GetTempPathA
GetFileAttributesW
LockFile
CreateFileMappingW
LocalFree
GetSystemTime
AreFileApisANSI
ReadFile
GetDiskFreeSpaceA
DeleteFileA
CreateFileA
GetTickCount
GetFileSize
UnlockFileEx
GetSystemInfo
CreateFileW
GetSystemTimeAsFileTime
FormatMessageA
SetFilePointer
MultiByteToWideChar
WriteFile
MapViewOfFile
FlushFileBuffers
UnmapViewOfFile
GetTempPathW
SetEndOfFile
GetLastError
GetFileAttributesExW
FreeLibrary
GetProcAddress
ReleaseMutex
CreateMutexW
WaitForSingleObject
GetModuleFileNameA
LoadLibraryW
OpenEventW
GetCurrentThreadId
InterlockedExchange
SetEvent
SetLastError
GetLocalTime
GetModuleHandleW
GetCurrentProcess
SetFileAttributesW
MoveFileExW
FindNextFileW
GetSystemDirectoryW
FindClose
RemoveDirectoryW
GetDriveTypeW
ProcessIdToSessionId
HeapSize
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
OpenProcess
Process32NextW
GetExitCodeProcess
CreateProcessW
ExpandEnvironmentStringsW
lstrcpynW
OpenMutexW
GlobalAlloc
GetModuleFileNameW
GlobalLock
GlobalUnlock
GetComputerNameW
lstrlenA
FindFirstFileW
GetFileTime
HeapFree
GetProcessHeap
HeapAlloc
lstrcpynA
Thread32Next
Thread32First
HeapReAlloc
HeapDestroy
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
OpenFileMappingW
GetCurrentDirectoryW
ShowWindow
IsWindowVisible
EnumWindows
WindowFromPoint
SetForegroundWindow
EnumThreadWindows
GetWindowThreadProcessId
EqualRect
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
DestroyIcon
SystemParametersInfoW
MessageBoxW
SetActiveWindow
SetWindowPos
SetWindowLongW
GetClientRect
GetWindowLongW
GetWindowRect
EnableWindow
IsWindow
FindWindowExW
SetWindowTextW
SendMessageW
ExitWindowsEx
SendMessageTimeoutW
FindWindowA
GetSystemMetrics
GetDesktopWindow
GetClassNameW
IsIconic
GetForegroundWindow
GetParent
GetWindowTextW
GetObjectW
CreateFontIndirectW
CreateDCW
GetDeviceCaps
DeleteDC
GetStockObject
GetOpenFileNameW
GetSaveFileNameW
RegDeleteValueW
FreeSid
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
SetFileSecurityW
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumValueW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ShellExecuteW
SHGetPathFromIDListW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetMalloc
SHCreateDirectoryExW
SHGetDesktopFolder
SHGetFileInfoW
SHBrowseForFolderW
SHGetSpecialFolderLocation
StgCreateDocfile
CoInitialize
StgIsStorageFile
CoUninitialize
StgOpenStorage
_adjust_fdiv
__CppXcptFilter
_unlock
__dllonexit
_except_handler3
_lock
_onexit
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_except_handler4_common
memset
_CxxThrowException
memcpy
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
__CxxFrameHandler3
iswspace
iswprint
_wcsupr_s
toupper
isdigit
_wcsnicmp
wcsncat
wcsrchr
_snwprintf_s
_snwprintf
_time64
memcpy_s
wcsncpy_s
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
vswprintf_s
?what@exception@std@@UBEPBDXZ
swprintf_s
??3@YAXPAX@Z
memmove_s
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
malloc
_stricmp
_strnicmp
free
_localtime64_s
realloc
memmove
strncmp
_wtoi
_wcsicmp
wcsncat_s
??_U@YAPAXI@Z
_purecall
wcsstr
??_V@YAXPAX@Z
rand
_memicmp
setlocale
_vsnwprintf_s
_snprintf_s
fopen_s
_vsnprintf_s
fclose
strncpy_s
_vsnprintf
strchr
fwrite
strrchr
fflush
wcscpy_s
wcstoul
_localtime64
wcsftime
tolower
swscanf
_wtol
_mktime64
_wcslwr_s
wcsncpy
swscanf_s
strstr
wcsncmp
strncpy
wcschr
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
GetIpForwardTable
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
GetProcessImageFileNameW
CreateHipsUserChoosePolicy
CreateLogDataBaseInterface
DeleteHipsUserChoosePolicy
DeleteLogDataBaseInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ