Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
promecefpluginhost.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
promecefpluginhost.exe
Resource
win10v2004-20240709-en
Target
promecefpluginhost.exe
Size
69KB
MD5
58da3017bdb1c14397890e8d34674f4b
SHA1
0551c640490d5f49dc751c6b3145057d76250716
SHA256
77188d2be076aa2ec35b395795e34ef46e74b07d0997e79bcdc06eceebb203e2
SHA512
7e96bf1519d66580121037eed2fd9e457199bcaa48697de507cce47a5efb484c1a1f452388c85fd9f8e1e8bb240d988a0fec28267f20fade11d3db1daae6e2e4
SSDEEP
1536:mchEHwpgCD7nt0lv8ecx+P/CXNDcyplYmWmQGg2f+27Hxa5J7YYxZ:NEQCCD7nt0lv8ecxHNDcyplYmzg9245F
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
H:\rc_bug_v12_i18_202405\Build\Release\WPSOffice\office6\promecefpluginhost.pdb
?load@QLibrary@kso_qt@@QAE_NXZ
?qt_metacast@QThread@kso_qt@@UAEPAXPBD@Z
?qt_metacall@QThread@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
??0QThread@kso_qt@@QAE@PAVQObject@1@@Z
??1QThread@kso_qt@@UAE@XZ
?start@QThread@kso_qt@@QAEXW4Priority@12@@Z
?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z
?compressEvent@QCoreApplication@kso_qt@@MAE_NPAVQEvent@2@PAVQObject@2@PAVQPostEventList@2@@Z
?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z
?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z
?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z
?event@QCoreApplication@kso_qt@@MAE_NPAVQEvent@2@@Z
?event@QThread@kso_qt@@UAE_NPAVQEvent@2@@Z
?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z
?notify@QCoreApplication@kso_qt@@UAE_NPAVQObject@2@PAVQEvent@2@@Z
?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z
??0QChar@kso_qt@@QAE@UQLatin1Char@1@@Z
?qustrlen@QtPrivate@kso_qt@@YAHPBG@Z
?arg@QString@kso_qt@@QBE?AV12@KHHVQChar@2@@Z
?arg@QString@kso_qt@@QBE?AV12@HHHVQChar@2@@Z
?arg@QString@kso_qt@@QBE?AV12@ABV12@HVQChar@2@@Z
?arg@QString@kso_qt@@QBE?AV12@VQStringView@2@HVQChar@2@@Z
?detach_grow@QListData@kso_qt@@QAEPAUData@12@PAHH@Z
?dispose@QListData@kso_qt@@QAEXXZ
?dispose@QListData@kso_qt@@SAXPAUData@12@@Z
?append@QListData@kso_qt@@QAEPAPAXXZ
?begin@QListData@kso_qt@@QBEPAPAXXZ
?end@QListData@kso_qt@@QBEPAPAXXZ
?shared_null@QListData@kso_qt@@2UData@12@B
?staticMetaObject@QCoreApplication@kso_qt@@2UQMetaObject@2@B
??0QFile@kso_qt@@QAE@ABVQString@1@@Z
?exit@QCoreApplication@kso_qt@@SAXH@Z
?exec@QCoreApplication@kso_qt@@SAHXZ
??1QLibrary@kso_qt@@UAE@XZ
??1QCoreApplication@kso_qt@@UAE@XZ
??0QCoreApplication@kso_qt@@QAE@AAHPAPADH@Z
?qt_metacall@QCoreApplication@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacast@QCoreApplication@kso_qt@@UAEPAXPBD@Z
?toString@QVariant@kso_qt@@QBE?AVQString@2@XZ
??1QVariant@kso_qt@@QAE@XZ
??0QVariant@kso_qt@@QAE@XZ
?connect@QObject@kso_qt@@SA?AVConnection@QMetaObject@2@PBV12@PBD01W4ConnectionType@Qt@2@@Z
?dynamicMetaObject@QObjectData@kso_qt@@QBEPAUQMetaObject@2@XZ
?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z
?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??YQString@kso_qt@@QAEAAV01@PBD@Z
??0QString@kso_qt@@QAE@ABVQByteArray@1@@Z
?compare@QString@kso_qt@@QBEHABV12@W4CaseSensitivity@Qt@2@@Z
?fromWCharArray@QString@kso_qt@@SA?AV12@PB_WH@Z
?fromUtf8@QString@kso_qt@@SA?AV12@PBDH@Z
?toUtf8@QString@kso_qt@@QGBE?AVQByteArray@2@XZ
??YQString@kso_qt@@QAEAAV01@VQChar@1@@Z
?append@QString@kso_qt@@QAEAAV12@ABV12@@Z
?startsWith@QString@kso_qt@@QBE_NABV12@W4CaseSensitivity@Qt@2@@Z
?indexOf@QString@kso_qt@@QBEHABV12@HW4CaseSensitivity@Qt@2@@Z
??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z
??4QString@kso_qt@@QAEAAV01@ABV01@@Z
??1QString@kso_qt@@QAE@XZ
??0QString@kso_qt@@QAE@ABV01@@Z
??0QLibrary@kso_qt@@QAE@ABVQString@1@PAVQObject@1@@Z
?activate@QMetaObject@kso_qt@@SAXPAVQObject@2@PBU12@HPAPAX@Z
??1Connection@QMetaObject@kso_qt@@QAE@XZ
??0QByteArray@kso_qt@@QAE@PBDH@Z
??0QByteArray@kso_qt@@QAE@ABV01@@Z
??1QByteArray@kso_qt@@QAE@XZ
?append@QByteArray@kso_qt@@QAEAAV12@ABV12@@Z
?toBase64@QByteArray@kso_qt@@QBE?AV12@XZ
??0QString@kso_qt@@QAE@XZ
?resolve@QLibrary@kso_qt@@QAEP6AXXZPBD@Z
?separator@QDir@kso_qt@@SA?AVQChar@2@XZ
?toNativeSeparators@QDir@kso_qt@@SA?AVQString@2@ABV32@@Z
?exists@QFile@kso_qt@@SA_NABVQString@2@@Z
?exists@QFile@kso_qt@@QBE_NXZ
??1QFile@kso_qt@@UAE@XZ
?setApplicationName@QCoreApplication@kso_qt@@SAXABVQString@2@@Z
?staticMetaObject@QThread@kso_qt@@2UQMetaObject@2@B
SetLastError
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
LoadLibraryExA
GetSystemInfo
RaiseException
VirtualQuery
VirtualProtect
FlushInstructionCache
IsProcessorFeaturePresent
GetProcessId
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemWow64DirectoryW
GetSystemDirectoryW
OpenProcess
GetCurrentProcessId
GetLastError
CloseHandle
GetCommandLineW
?argv@KAppArguments@krt@@QAEPAPADXZ
?getParam_extra@onlineparams@krt@@YA_NABVQString@kso_qt@@0AAVQVariant@4@@Z
?argc@KAppArguments@krt@@QAEAAHXZ
??1KAppArguments@krt@@QAE@XZ
??0KAppArguments@krt@@QAE@PB_W@Z
?getPluginPath@pluginconfig@krt@@YA?AVQString@kso_qt@@ABV34@0@Z
?IsPDFStandAloneVersion@product@krt@@YA_NXZ
?isOverseasVersion@product@krt@@YA_NXZ
?frameworks@dirs@krt@@YA?AVQString@kso_qt@@XZ
?init@krt@@YA_NABVQString@kso_qt@@000@Z
?Execute@KProcess@ksafe@krt@@YA_NABVQString@kso_qt@@ABVQStringList@5@@Z
?_Xlength_error@std@@YAXPBD@Z
__current_exception_context
__current_exception
__std_terminate
strstr
wcsrchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
memset
_set_purecall_handler
set_unexpected
_except_handler4_common
_seh_filter_exe
_set_app_type
signal
_configure_wide_argv
_set_abort_behavior
_set_new_handler
_initterm
_initterm_e
exit
_exit
set_terminate
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_wide_winmain_command_line
_set_invalid_parameter_handler
terminate
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
_callnewh
_set_new_mode
free
malloc
_wgetenv_s
_wputenv_s
wcsncpy
wcscpy_s
__setusermatherr
_set_fmode
__p__commode
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ