Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
8d3735c0cdd151bfb6eeb4a465f1386c9f84b209d9236f4300ada6e741469781.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8d3735c0cdd151bfb6eeb4a465f1386c9f84b209d9236f4300ada6e741469781.dll
Resource
win10v2004-20240802-en
Target
8d3735c0cdd151bfb6eeb4a465f1386c9f84b209d9236f4300ada6e741469781
Size
457KB
MD5
fc79ccbc8ec4d8a3bcb7df8a8bd16e05
SHA1
5ae2748dae2d102a4a5705c924a94266303580a9
SHA256
8d3735c0cdd151bfb6eeb4a465f1386c9f84b209d9236f4300ada6e741469781
SHA512
ead80193184c4fc6d66c71255c970feca6078b99e718830c9c58420585bc3aa18d55859315e7f6a4cfb1210554e2b5338885d96408337776eb50dd3d429f2031
SSDEEP
12288:B1Xf3mZPw0byL2QwdqrQRMft98eCwcvNcXp9NU2ooSTXOf7:fXsPwTLSLcXtbooST07
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\QQ1.83\Output\Plugin\Com.Tencent.QQVip\Bin\QQVip.pdb
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?Empty@CTXStringW@@QAEXXZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXBSTR@@QAE@XZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?Format@CTXStringW@@QAAXPB_WZZ
??H@YA?AVCTXStringW@@ABV0@0@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?Format@CTXTime@@QBE?AVCTXStringW@@PB_W@Z
??0CTXTime@@QAE@_J@Z
?Find@CTXStringW@@QBEHPB_WH@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
?Remove@CTXStringW@@QAEH_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetTimeOffsetUTC@NLS@@YAJXZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
??8CTXBSTR@@QBE_NPB_W@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?DeleteFileW@FS@@YAHPB_W@Z
?CopyFileW@FS@@YAHPB_W0H@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?CopyDirectory@FS@@YAHPB_W0PAUITXCopyDirProgress@@@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?IsFileExist@FS@@YAHPB_W@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
??0CTXStringW@@QAE@PA_W@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetLength@CTXStringW@@QBEHXZ
ord33
?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
ord34
??1CCmdCodecBase@@UAE@XZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??8@YA_NABVCTXStringW@@0@Z
??9CTXBSTR@@QBE_NPB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??4CTXStringW@@QAEAAV0@_W@Z
?GetAt@CTXStringW@@QBE_WH@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
??4CTXStringA@@QAEAAV0@ABV0@@Z
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??0CTXStringA@@QAE@XZ
?Copy@CTXBSTR@@QBEPA_WXZ
??1CTXCommPack@@UAE@XZ
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
??0CTXCommPack@@QAE@XZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
??1CUnZipFile@@QAE@XZ
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
??1CTXHttpDownload@@UAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@PBD@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?Length@CTXBSTR@@QBEIXZ
?GetLoginServerTime@Time@Util@@YAKXZ
?GetBuffer@CTXStringA@@QAEPADH@Z
?Mid@CTXStringA@@QBE?AV1@HH@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CTXStringW@@QAE@H@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??0CCmdCodecBase@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
??M@YA_NABVCTXStringW@@0@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?IsFlagValid@Contact@Util@@YAHKK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?SaveMsg@Msg@Util@@YAHPB_W000KKPAUITXMsgPack@@PAUITXData@@@Z
?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z
?ConvertCharFormatRichEditToMsgPack@Msg@Util@@YAHABU_charformatw@@PAPAUITXData@@@Z
?TransformMsg@Msg@Util@@YAXPAUITXMsgPack@@PAPAU3@K@Z
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?GetIMVersion@Contact@Util@@YAGK@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?IsServerControlBitOn@Misc@Util@@YAHK@Z
?SetMsgTime@Msg@Util@@YAXPAUITXMsgPack@@_J@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetMsgPackFirstElemByType@Misc@Util@@YAHPAUITXMsgPack@@EPAPAX@Z
?OpenUrlWithWnd@URL@Util@@YAPAUHWND__@@ABVCTXStringW@@W4URLMODIFYLEVEL@12@0HHPB_WPAPAUIGFStandardWin@@HV4@HPAUIIEHost@@@Z
?GetPublicNameEx@Misc@Util@@YA?AVCTXStringW@@K@Z
?WriteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z
?GetIDAndTypeInFromChatWnd@ChatSession@Util@@YAJPAUIGFFrame@@AAKAAH@Z
?QueryChatSession@ChatSession@Util@@YAXPAUIAFChatFrameType@@PAPAUIAFChatSession@@@Z
?CreateChatFrameType@ChatSession@Util@@YAHKHPAPAUIAFChatFrameType@@PAUITXData@@@Z
?GetChatSessionViewFrame@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
GetCanvasHandle
DeleteCanvas
DeleteTexture
TranslateTexture
CreateCanvas
SetCanvasFilter
DrawTexture
CanvasToTexture
SetTextureFilter
AlphaBlend
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetProcessHeap
HeapSize
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
SetUnhandledExceptionFilter
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
LockResource
IsWindow
IntersectRect
SetRectEmpty
CopyRect
GetDC
ReleaseDC
UnregisterClassA
CharNextW
GetDeviceCaps
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
SHGetFileInfoW
CoCreateInstance
CoCreateGuid
OleRegGetMiscStatus
StringFromCLSID
CoTaskMemFree
SysStringLen
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysFreeString
ord64
ord32
ord31
ord30
ord58
ord15
ord18
ord22
ord23
ord61
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
__CppXcptFilter
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
wcstoul
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
_CxxThrowException
_recalloc
__CxxFrameHandler3
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
??_V@YAXPAX@Z
memmove_s
_purecall
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
wcsncpy
??2@YAPAXI@Z
memset
_time64
__clean_type_info_names_internal
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ