Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/12/2024, 15:11

General

  • Target

    0d1e840adbf67ef337c53ac47b139447a16601ea1de39329cc87a6ea9d1d4a2fN.exe

  • Size

    1.2MB

  • MD5

    948b45f0c26a433435f6b881d38fdf80

  • SHA1

    f996307d9fc781f322c3c4f659120eacbf412a02

  • SHA256

    0d1e840adbf67ef337c53ac47b139447a16601ea1de39329cc87a6ea9d1d4a2f

  • SHA512

    ecbad1e6197bb2a18e4c784cdff0c1ae832e1b73ede6e905b491f00bfc236c30546c78f162edb085bca8f9c858a1d3ea2978cc5172f7d12c789ee1a827c9b82d

  • SSDEEP

    24576:hvpH41Cl36RgrO/+sQWdKHsJYrrg0H+2UbDC:pmvQpOY3gH2UbD

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Modifies firewall policy service 3 TTPs 3 IoCs
  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

  • Sality family
  • UAC bypass 3 TTPs 1 IoCs
  • Windows security bypass 2 TTPs 6 IoCs
  • Checks for common network interception software 1 TTPs

    Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Downloads MZ/PE file
  • Drops file in Drivers directory 5 IoCs
  • Sets service image path in registry 2 TTPs 5 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 20 IoCs
  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies file permissions 1 TTPs 4 IoCs
  • Modifies system executable filetype association 2 TTPs 5 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Windows security modification 2 TTPs 7 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Enumerates connected drives 3 TTPs 45 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 6 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops autorun.inf file 1 TTPs 2 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Drops file in System32 directory 55 IoCs
  • UPX packed file 29 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 26 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 10 IoCs
  • Modifies Internet Explorer settings 1 TTPs 7 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 54 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 17 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • System policy modification 1 TTPs 3 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\system32\taskhost.exe
    "taskhost.exe"
    1⤵
      PID:1116
    • C:\Windows\system32\Dwm.exe
      "C:\Windows\system32\Dwm.exe"
      1⤵
        PID:1168
      • C:\Windows\Explorer.EXE
        C:\Windows\Explorer.EXE
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:1212
        • C:\Users\Admin\AppData\Local\Temp\0d1e840adbf67ef337c53ac47b139447a16601ea1de39329cc87a6ea9d1d4a2fN.exe
          "C:\Users\Admin\AppData\Local\Temp\0d1e840adbf67ef337c53ac47b139447a16601ea1de39329cc87a6ea9d1d4a2fN.exe"
          2⤵
          • Modifies firewall policy service
          • UAC bypass
          • Windows security bypass
          • Loads dropped DLL
          • Windows security modification
          • Checks whether UAC is enabled
          • Enumerates connected drives
          • Writes to the Master Boot Record (MBR)
          • Drops autorun.inf file
          • Drops file in Windows directory
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          • System policy modification
          PID:2884
          • C:\Users\Admin\AppData\Roaming\tencent\QQPCMgr\Download\QQPCMgr_Setup.exe
            "C:\Users\Admin\AppData\Roaming\tencent\QQPCMgr\Download\QQPCMgr_Setup.exe" /S ##silence=1&handle=459038&update=1&supply=79401&forceinstall=1&qqpcmgr=0&DownloadSetupInOne=1
            3⤵
            • Drops file in Drivers directory
            • Sets service image path in registry
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Writes to the Master Boot Record (MBR)
            • Drops file in System32 directory
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Modifies data under HKEY_USERS
            • Modifies registry class
            • Modifies system certificate store
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:2464
            • C:\Windows\system32\cmd.exe
              cmd.exe /C icacls C:\Windows\System32\msvcp140.dll /grant Administrator:F
              4⤵
              • Suspicious use of WriteProcessMemory
              PID:1584
              • C:\Windows\system32\icacls.exe
                icacls C:\Windows\System32\msvcp140.dll /grant Administrator:F
                5⤵
                • Modifies file permissions
                PID:2420
            • C:\Windows\system32\cmd.exe
              cmd.exe /C icacls C:\Windows\System32\vcruntime140.dll /grant Administrator:F
              4⤵
              • Suspicious use of WriteProcessMemory
              PID:2404
              • C:\Windows\system32\icacls.exe
                icacls C:\Windows\System32\vcruntime140.dll /grant Administrator:F
                5⤵
                • Modifies file permissions
                PID:2088
            • C:\Windows\system32\cmd.exe
              cmd.exe /C icacls C:\Windows\System32\vcruntime140_1.dll /grant Administrator:F
              4⤵
              • Suspicious use of WriteProcessMemory
              PID:2248
              • C:\Windows\system32\icacls.exe
                icacls C:\Windows\System32\vcruntime140_1.dll /grant Administrator:F
                5⤵
                • Modifies file permissions
                PID:2096
            • C:\Windows\SysWOW64\cacls.exe
              "cacls" "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211" /t /e /c /g SYSTEM:f
              4⤵
              • System Location Discovery: System Language Discovery
              PID:2080
            • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCSoftCmd.exe
              "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCSoftCmd.exe" /command=SetSimpleVersionConfig /SimpleVersion=2 /From=Installer
              4⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies data under HKEY_USERS
              PID:1124
            • C:\Windows\SysWOW64\Netsh.exe
              "C:\Windows\system32\Netsh.exe" exec "C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\firewallLog.txt"
              4⤵
              • Event Triggered Execution: Netsh Helper DLL
              • System Location Discovery: System Language Discovery
              PID:2584
            • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe
              "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe" -i
              4⤵
              • Executes dropped EXE
              • Impair Defenses: Safe Mode Boot
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              PID:2660
            • C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\RemNPX.exe
              "C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\RemNPX.exe"
              4⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:2352
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMContextScan64.dll"
              4⤵
              • System Location Discovery: System Language Discovery
              PID:2096
              • C:\Windows\system32\regsvr32.exe
                /s "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMContextScan64.dll"
                5⤵
                • Modifies system executable filetype association
                • Modifies registry class
                PID:1012
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMContextScan.dll"
              4⤵
              • Modifies system executable filetype association
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              PID:1552
            • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe
              "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe" -e
              4⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              PID:1080
            • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe
              "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe" -s
              4⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              PID:2304
            • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCTray.exe
              "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCTray.exe" /regrun
              4⤵
              • Drops file in Drivers directory
              • Sets service image path in registry
              • Executes dropped EXE
              • Checks whether UAC is enabled
              • Enumerates connected drives
              • Writes to the Master Boot Record (MBR)
              • Drops file in Windows directory
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies data under HKEY_USERS
              • Modifies system certificate store
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • System policy modification
              PID:1796
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMHwDrX64.exe
                QMHwDrX64.exe /starthwdetect
                5⤵
                • Executes dropped EXE
                PID:1552
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\TrayRocketInjectHelper64.exe
                --TryAll
                5⤵
                • Executes dropped EXE
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                PID:1272
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\qmdl.exe
                "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\qmdl.exe"
                5⤵
                • Executes dropped EXE
                • Drops file in Program Files directory
                • System Location Discovery: System Language Discovery
                • Modifies registry class
                • Suspicious behavior: EnumeratesProcesses
                PID:1148
                • C:\Windows\SysWOW64\icacls.exe
                  "C:\Windows\System32\icacls.exe" C:\Users\Admin\AppData\Roaming\Tencent\Config\ /t /setintegritylevel low
                  6⤵
                  • Modifies file permissions
                  • System Location Discovery: System Language Discovery
                  PID:3392
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCUpdateAVLib.exe
                "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCUpdateAVLib.exe" /LocalAVLibUpdateAuto 16
                5⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:3592
                • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\TpkUpdate.exe
                  "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\TpkUpdate.exe" /auto
                  6⤵
                  • Executes dropped EXE
                  • Drops file in Program Files directory
                  • System Location Discovery: System Language Discovery
                  PID:3660
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCSoftCmd.exe
                "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCSoftCmd.exe" /command=GetQimei
                5⤵
                • Executes dropped EXE
                • Writes to the Master Boot Record (MBR)
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                PID:3220
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\Plugin\QMDynamicPackageSetup_17.1.25794.211__1725540070725.exe
                "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\Plugin\QMDynamicPackageSetup_17.1.25794.211__1725540070725.exe" /S
                5⤵
                • Executes dropped EXE
                • Drops file in Program Files directory
                • System Location Discovery: System Language Discovery
                PID:3744
              • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMGarbageAutoClean.exe
                "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMGarbageAutoClean.exe" taskId:31
                5⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:3124
            • C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\UpdateTrayIcon.exe
              "C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\UpdateTrayIcon.exe" -t QQPCTray.exe -c 1 -p 1 -v 0 -h "" -d "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\"
              4⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of FindShellTrayWindow
              PID:2316
              • C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\UpdateTrayIcon64.exe
                "C:\Users\Admin\AppData\Local\Temp\Tencent\QQPCMgr\~f776db1\UpdateTrayIcon64.exe"
                5⤵
                • Executes dropped EXE
                PID:2524
      • C:\Windows\system32\DllHost.exe
        C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
        1⤵
          PID:848
        • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRtp.exe
          "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRtp.exe" -r
          1⤵
          • Identifies VirtualBox via ACPI registry values (likely anti-VM)
          • Sets service image path in registry
          • Executes dropped EXE
          • Adds Run key to start application
          • Enumerates connected drives
          • Writes to the Master Boot Record (MBR)
          • Drops file in System32 directory
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies data under HKEY_USERS
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: LoadsDriver
          • Suspicious use of AdjustPrivilegeToken
          PID:1816
          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCTray.exe
            "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCTray.exe" /elevated /regrun
            2⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Modifies data under HKEY_USERS
            • Suspicious behavior: EnumeratesProcesses
            PID:836
          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\VolSnapshotX64.exe
            "C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\VolSnapshotX64.exe" 00000003000000010501010000000000000205010000000000000003050150000000
            2⤵
            • Executes dropped EXE
            PID:2124
        • C:\Windows\system32\vssvc.exe
          C:\Windows\system32\vssvc.exe
          1⤵
            PID:1092

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\7z.dll

            Filesize

            1.1MB

            MD5

            cfaf2115281d53fd3fc456cf0927f207

            SHA1

            79f2fe2a1ff5ba1b2c9a7e69195f3e8a594c1374

            SHA256

            ded1e0d1466c978674583c895836192e3b5831e8c227aaada02d80df22543493

            SHA512

            43c8e7a39107cd269efd9cd8d76ae7f3432a19c17b4069a4b9ff8d56d4f57f1649f95173f48eddb52f09e96b742abf7404bafe156b2100f07a881b0b9008bba7

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AmISlowing.sys

            Filesize

            33KB

            MD5

            df298a38c3b0f674c2ac28432eed2fa7

            SHA1

            3a7c6bf97d3fe0c11706c1e7a510d1734b2ffaae

            SHA256

            924979c93e7e194d545eab65c69b4324b31274f504bfaf2b428aabdd7190520a

            SHA512

            4a41e048fb7f0f8186147d861916d4e6eca9c0bc0ab98e3f432b623651d68973925b641d413462d5ff93a47f844d2eff9e40da3c73e255070bd9f8a19ae02a03

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AmISlowing64.sys

            Filesize

            35KB

            MD5

            75abcd24a9f62201a2b16b71c8facd1b

            SHA1

            eb35b44143728e931d7744d1ae6f9b108528be4a

            SHA256

            3a12f336b72c59a874969a14638cc5d055646a5a7ecd94c2fc5dce13e7d796a7

            SHA512

            caf9fecf6315833db6fe5073834601db2fcbb5949ae0b75ba657a85d0fb296f9842d671492e9b7990d7a781fc4481b2738230f1e74534fb71b21cbec6e2f36a3

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AmISlowing64_ev.sys

            Filesize

            40KB

            MD5

            a826d1ac9f033155e6c7f9e192f34c40

            SHA1

            c69ff13e00e89f37432da930acb6236164f6cb4a

            SHA256

            fba178108c80b1d8e573399bd7c8af3ec6c34252c7f85b9054b1ebd5d3a25219

            SHA512

            bdaabbc368848bb15a6b44b4fe077cfe44c5b5d5be947f02be191a20c8fb9010f520db35f2cffab3eb6d0814e5009c0894e6e88e3a010b8a85a9452697a5acac

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AmISlowing_ev.sys

            Filesize

            39KB

            MD5

            0ec75d87cd294622cd48268ec785ff42

            SHA1

            05d7c27cd7b1504ccefef4d1bcf57bbc36cfafcd

            SHA256

            47a3744c87e439da754e0726dda1c30e325a2df57530490566d449e7b733c202

            SHA512

            8f8e381fc5cf2d61a28fa0aeb42bdeef8167a9577b1dbbcc92298d96681f64b507968579c43d78a6b558ec4122d0b7001d389f36bf4da23b2e3de915c13bb3a7

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AntiRK.sys

            Filesize

            51KB

            MD5

            de4c37943a465c6bc82976da66e4e553

            SHA1

            ea4bb5b27e6f161fa1093ff5f732ba1ab998564c

            SHA256

            0be83ecbc97d1be0ef75b14c6d70a1c358694407451db14714e2f3af2df0225f

            SHA512

            20b836d15043f62c408ee025c7e9521a2582829591a66a58a4e59225f148413391253289e8bc7993c94061737602ef9cfbee1196645c0c0f027e4d8591344cb5

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AntiRKX64.sys

            Filesize

            52KB

            MD5

            ef8dcc0c9a6f7cc82d86a96192ba78d4

            SHA1

            695075a6e45414dd578f3fc63b118a4bd3d966a4

            SHA256

            3dd19815252f983b022757982600ae72f78265fae76a8f39cf40f64351cdf800

            SHA512

            f963dd6561471ca7143fe8e5414e989a669f14c0272bc4ef49ed4b9799ac0bafce40016bf3034d131ec8fae2d7a48af3cf8609144286657e6729362012f82204

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AntiRKX64_ev.sys

            Filesize

            60KB

            MD5

            369d2e79ad8d21fee961efe005cb683c

            SHA1

            148f7c491c9dad37bb41cac74e58ba73232fbcba

            SHA256

            5b4b6ba27e706e9de78a08c52066853e3b625ecaed865d51cf99da888259f963

            SHA512

            edb299791cca565e8d87b73e53293fccabf4b05a1abdede66cfa6ac9168cd347aa0d378a4a38d8c4f1d2367642598dd94ea5372baddc18ae267327d6049963cb

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\AntiRK_ev.sys

            Filesize

            59KB

            MD5

            df48217a495c909a4cf97d39223e38e0

            SHA1

            9fc4499707f4a1b2f69d0d90c26a3f946c8bfc47

            SHA256

            d9f4836d4c4ece112b2cc8387d1deb4d1f46924652d155a862fdf46080b08b78

            SHA512

            d5d751b291ca13c8bf884529d9ca6734f1b550a2715a10c304987977718ec610c11a735082b1be92ba7d1af8e5f465435b96934d8362cd75b4e95ffdb115e50e

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\DocProCloudCfg.dat

            Filesize

            141KB

            MD5

            efbc30bff503d5858bcab836764fa330

            SHA1

            bb0444225cb3bce19e48353bf3cee50cee87ce50

            SHA256

            ce03bd47a6f8a12d6c7f00da688417033f89903656db6ac914822b2acdcfd288

            SHA512

            1adb680b2a343a614f1564966d93d55f6e8ecacd48d1981de9e1150667f6a3d2a32bdc0ea6e8bacee0d9b4872785c2446f1b111f88fa8b6ab59d4928a07525cb

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\GF.dll

            Filesize

            3.2MB

            MD5

            8322da5c83f3f8cd994d865e2dc435ad

            SHA1

            6821d00d0f9a5b9f41fedaaf23c89941fafae432

            SHA256

            b4e7a0385f22ff3e7dfb00d282fa2f56048575626b3faaca1aae786342170a9f

            SHA512

            7ee9803bc278d5b2f91f901164abdca27a29adc588c77e5ccfbaaf691d6b30e9d33a33d1beed72a9b01716bb9ecf851ee694cdedb01bcabeab26a64657ed68cc

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\GFCustom.dll

            Filesize

            576KB

            MD5

            a386ff19b6962b217c075cb1c3a06c9c

            SHA1

            0c2aedb9d8c5525fafed0542b665800e5bef2c92

            SHA256

            34869c68792b769e9636a14f2691458906826a6d28b0221cd3dc4f714fd9c4e8

            SHA512

            aa42553a34547713964261ed2f72cea67f7177855f9a24a0030220840b06bb9ad34678c195511ad77bef4ebce8e3cff78aad552657ccb86752cff72251568d29

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMCommon.dll

            Filesize

            1.2MB

            MD5

            d41b239ea495a1883ce1ca33990e7e23

            SHA1

            1b3c926d868eb3fea8d0d8dc27ca31b01db1ea2d

            SHA256

            31f4e451d7d248b5a183920defdf5eda399a6eae9e0c3f13a9a554af79c93be1

            SHA512

            e3ed3825ebc75c3b4182b8b389b7b7f9d6b387297a528ce3043671b5a62b09e8a33d89929c02b00feb95fac4bf6ccdb48bcbfdc01ce044a15b9ad0e92bbe3963

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QMWebFWCtrlCfg.dat

            Filesize

            4KB

            MD5

            9dec6eb42d04b492166b3661c8a27df6

            SHA1

            cd0a7d69e1df75c95a097134aeb6ce8baf200e9c

            SHA256

            21a6a64bed8db9f418764d87facaabf9adebe924b58eb0550bb1e388ff87ce67

            SHA512

            a08b9cb6de8e435db6af545125306a7b996ce0a237ad073f0c48391e2f0138199cad5441277e9b9dcb21ad269c1d37dd346b092eb3b258e340ea539dd79c1040

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCRTP.exe

            Filesize

            584KB

            MD5

            e254cfe2e1ab27a0b3c10ff32e95f8c5

            SHA1

            31a1b3dd5b5ec6df44abdbdab4ec8e3523de5eeb

            SHA256

            04b5aebec85d772ac55dd1042b0b6fe27ed838f084ae7f2e68ee8b3382dacaf7

            SHA512

            57894fb71a6268879cc4d90771ede01c347b92cfa30fb70d91a6c6584a86152838754bfee9d8c8eb1b91b9def958ef8e480f7c4cc9f84ee703ad8d0799760ef7

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCSoftMgr.exe

            Filesize

            4.4MB

            MD5

            c892aabf0e6de36f3792aba7f06fc5f6

            SHA1

            258f9127be0bad1697327bc9686c1e535c95d6c4

            SHA256

            260558c9fa4cef2db260f97dcc384ae37065f1de48b9f054ccf460b2328a1ff8

            SHA512

            2ac00f881ca28ddd141957940b22e3731702e78e5f787fa740df2450cfb66a93d897b3e18b58619a6ad8fc7f689486c9192caf5269b23e3c8efac762fb09782b

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCTray.exe

            Filesize

            156KB

            MD5

            9251fa0af2e779c6f4cc2de65fef6b0e

            SHA1

            970dc4ae87de008340536247376e8dd001a0802c

            SHA256

            11283380c06d48f7b0ebb8b6bcfe83f40c7cc013db15196074b47ec2be6185f7

            SHA512

            cd5d583d82446fa4b207528b075365f217586d6cc6a6c10b1cc1c5d012a90029a659bae560beddc70d682a7b66104f1ed9b7d4cda717f384508e49413180add7

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\SoftMgr\Common.dll

            Filesize

            3.6MB

            MD5

            429cdc136639a17281f11fef6cc50488

            SHA1

            d1ef48a681b26ffef0f7854ed896c95218509194

            SHA256

            ad861f17fea951caa1ef05da9ad7dadb5c97eb15aa8e006f6a8656f6ffa4745c

            SHA512

            69012ed9be0c59b4e2b906070df61f40c2654ee41736ba6984d9bb949ed59c50c5ee9c85710b82f693f3e89b1bf14285dc3c8557c49e29b7d58d2026e15c0e2a

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\WeChatOCR_1.0.1.23\concrt140.dll

            Filesize

            237KB

            MD5

            ec5a86b5e7bdffd50e022e431287273a

            SHA1

            f8ca0cd2955ee86c2f8ae2e9f1514071dba314fb

            SHA256

            290f577461b2d4197db0b7d09341225c90cf066984f965e54c9fa4aa16ba6687

            SHA512

            d712c835da99cbc98bbb031301ebc339103df25ab651dbe6c0b4bb90e2646ef43680a93834f1846d84969e7e7d66ce7df91f3381c6a570fa723f02d704f3b262

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\WeChatOCR_1.0.1.23\msvcp140_1.dll

            Filesize

            20KB

            MD5

            4b30f6c86cf6932f2297ffc5e64d2bfb

            SHA1

            e16f032af4d319002a0db8514d97c1ca23fef42f

            SHA256

            f92ec09eb6b666e42cd52ef912f298fb79c264ef3272735f69f99684b88585df

            SHA512

            9c1cca4ec49e40a955284be42bf38a3a9a1264aa04d69fc2bbfc6cb9ef2c32bf99b496740629b283eaa944d8b8166ce755443656640f5c65f98924940d295588

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\WeChatOCR_1.0.1.23\msvcp140_codecvt_ids.dll

            Filesize

            18KB

            MD5

            4d24e093ee8fb09955109923b8951a7c

            SHA1

            e09b5cee8a7ee36a0cf0fc7a17859ec60799f03e

            SHA256

            e5fb7a7cf24a854463d6a00b2aebd50e4acef58d2c1535246069ff3f4a1dd027

            SHA512

            2dd1403db4a1c47fba7ab0271d88d33bfaa8ab5c0f4e5e054596dea042c6fe74095b92ad4f2f78b98d5fa5713061321f8e38c1e2196702e89fd04691c15f5f9c

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\WndFilterCfg.dat

            Filesize

            1KB

            MD5

            69fe2a92b8307753d2b86e6fdb3436d0

            SHA1

            7cabe9a2bbd3733b8f0afb3f9674d68842ffb397

            SHA256

            7ed74bd03ddc4798d501f12c3738a6c7e8e827d5ecca1f2b1edfa1c8d980b261

            SHA512

            3771ed7f385878cb014d08e324d622c26f0656b49aff7b4a584725b0879f3c3a430cfc97239d8459961883b19b2163ff5222fde84a3768488c4690677cc7235a

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\adconfig.dat

            Filesize

            158KB

            MD5

            5b50ad26d072935593e5ddbb8c31ceca

            SHA1

            9552cd8807a159587a73a56ee618279da0003b65

            SHA256

            38aa94731d808ccb62ac0f089caacfaa9dfa5c9ced96e0792d77beca4b837999

            SHA512

            dd6c658dfa8fb66e79cb0cb598003712c3eabcb3e4049b78d28e06b0f83c3aadc0f99c77ae482f8d3816b3db32e6b34b99853d7bf253f7ed3b505bf627d36a37

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-console-l1-1-0.dll

            Filesize

            19KB

            MD5

            bcbfcd896e50e591b22e237c903fb523

            SHA1

            2358537e316afaca3b61ea797b58ff60c1ef99c0

            SHA256

            8f28bbea2ac836fe993c2fccbc7920c6e0fb5cd3fba7956a85273ebe2282fb15

            SHA512

            1a9812c4fe427e89254df346721cfc93ef52d5547d293a987516b43c21e7baa51ee76f6dacebe87334a67ba54b98633e603b4da21b8264240561e1801e922eeb

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-datetime-l1-1-0.dll

            Filesize

            18KB

            MD5

            aab52e0385a66e157bb440cb5e3cd3db

            SHA1

            55421c5e58951921843c0944d18e22391bf05c8d

            SHA256

            baa6eae9e3742c736327da12c0e2e586e65a0b6d667547c638fd1287886f022e

            SHA512

            4bdbb93d8259ee344ce6a6138cdda2fb19bef280f8aa06daa5640125754a808ee4a68302bdf1bc5a87362b886e826414c0f43643b068a7925966adb9bca0a487

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-debug-l1-1-0.dll

            Filesize

            18KB

            MD5

            f97b671fac0baebca98059a9b099c4f9

            SHA1

            433f4850353d7ec03b3215d77cda5f0874e67439

            SHA256

            d9b96b975a90b0a8c08ffe6d2185b6714d75bd8fd3d8346aff4a069d44960f73

            SHA512

            f2c8510f1b166248259781d4c910358bd89fca4d8e39b3963adfd26fa999b4991f08ca966c265ec3f9161d704844a15caf97dddc88fa2ae95cb075245e990063

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-errorhandling-l1-1-0.dll

            Filesize

            18KB

            MD5

            7c1f03e83bcafe58ff99b3abb9e7de43

            SHA1

            15e8676f12f7ec0bf102b772839cb0bf8f1b551e

            SHA256

            c8fc616e5591d0b77c592059e2fe2cecb54b1219a72d9a92fd09f396fd340cf7

            SHA512

            e3206b7863795f3d6251ea788caea466fea6dc89678c8623ccbde27286dcdcde9158b3132296912ff06b3bd913f91bcb2ac9f21d0654f6389adc086870e9e0bd

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-file-l1-1-0.dll

            Filesize

            22KB

            MD5

            350e52ba8f75e06b370e7d7b60c97c7f

            SHA1

            24e81d8178a368b31e906a43ab70cd4912430dab

            SHA256

            c332a484a959a2241c43767f7eff8067855dfaff6ced79f03de154de99269b34

            SHA512

            31f7d32895e37aa35e89c5bdcadebb15eab87c30761c02aacac622048f05c91c2d52ded7b2225c2ef75cddcf8c58f714dbb8ebc579d0e58ff308df06c24e4411

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-file-l1-2-0.dll

            Filesize

            18KB

            MD5

            856be91f8f44394cf92be1af50530521

            SHA1

            6baebcc3dee03fa7dc17500d8540925307cb9beb

            SHA256

            ad487c96c39271db2c3340bb106fa8f3f2b401b100b3d342813c09fbfbddbd05

            SHA512

            8ae6f848c1ae7831fa012f87387e6334351545c185329d905ac9108694fab4b073487cba621154062e8fd357d65303938a47ba71b3d1047640bc30d5ca3d2ac1

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-file-l2-1-0.dll

            Filesize

            18KB

            MD5

            15f59e829f9f2020e9c47a10deee718c

            SHA1

            365522c1e3a230b19cd4d82d8f0bdc944ac8435e

            SHA256

            93b28bff2f9d64a02f8362224ca45bfe4d6bb7fa6f83403ba9adec300dc7904c

            SHA512

            b8fbbf6403aa7db868cb2581ddabfff20c7e1912a4c41107fd91034c54020a344ce8f0fb4ca2f32f20e79486c5fe87177b2744f1ef593ddb5414d2adfd18b971

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-handle-l1-1-0.dll

            Filesize

            18KB

            MD5

            b801c68f8146904adb86869f5c3477a5

            SHA1

            ffb860ca10040ecaf5ae4a61a9c11db3e2eeeca6

            SHA256

            d83d3edef8ddbecf31af7437653e66adeb303947ef3da31a1280a485422e475f

            SHA512

            dbb7f1fb13d313da2047bff45ec0300d7e2f66337110fae20217137b9a6784663b42c56b135a4cae21b367d7f1650a9d158a71793bfd1822e527d6310ad6dd2a

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-heap-l1-1-0.dll

            Filesize

            19KB

            MD5

            db5013d1a02d899314b9518da6d0b2e0

            SHA1

            3e1e8df8f2f4a2184a50e11da015635a5558b477

            SHA256

            47adb171040b53b068e2dc259ebc75562dcec8811d68b7c4b0c16a797d7388ba

            SHA512

            eaeae30f1427be40614e1818c67648448c0808ace554ce1ab0441b5525673ad1dde7ab4d124858442fe9590048a3bb241b639375d3f89ef7185bd15d4cf0024f

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-interlocked-l1-1-0.dll

            Filesize

            19KB

            MD5

            86e369bd8455272049bb60a53624aeee

            SHA1

            b7ff6dc01ab07ca32cf030697fdaf1162112adcf

            SHA256

            fe8c2607e57e6779b6485ae08e658bd7b98d79147946f262d6b3699de9259d43

            SHA512

            606fd78d1a39996d623f4ce431401a4c91cf2a401bce6d04371bfe3a2b0e701f04167d9f7c897c9b73813544af0a474948ce3e23e7825b273af590b86907b92d

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-libraryloader-l1-1-0.dll

            Filesize

            19KB

            MD5

            f72de8f45343b9f0135f4d71a3b67fc2

            SHA1

            67cef9a3bc9891cf41146c25879835ad7b2defbe

            SHA256

            307ac04192de5a107ee66c9a4bdc16f95cede35ff39f50d811a8d5defe6e044c

            SHA512

            fdd8900264800117c238757abf62ed5c8883761a1895fcda4bb149534596690871ba3494523df34e4239cb45851a9db85266ff393fddbcb1e1ca3dd049c4475c

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-localization-l1-2-0.dll

            Filesize

            21KB

            MD5

            a675093b0d146773b5a2010a0adfd021

            SHA1

            cfb93918c25c4359788680ccc140381fab1e9358

            SHA256

            a6d2196e5c8b17851ea134f1ac02481846f78b0075860cb6eb4f90e0243449e6

            SHA512

            56ad8adf41c7ed0f04ffc371dc7d538127ae245fea8783a4b0af5e92940656e0b41a0bcb88ac263b3d2efcf8396cf196993d882ffe0d74c1094b31f47558d27c

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-memory-l1-1-0.dll

            Filesize

            19KB

            MD5

            ce7d62974e002ed7736117fce3d25b38

            SHA1

            4225fbf9f73ffca92c18f04fb650452f80ea0fcf

            SHA256

            01eca7b03ce90601768acb131d61875e418197234891fb71a2695aaa2f13857a

            SHA512

            bd151a8d135b540ba573af01e6089e03a6981ef97fb1e6e3465312815787b563d7c205371f0fe06b674e1924b15fedaab239d012615e38b5192bf4d2170dd60b

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-namedpipe-l1-1-0.dll

            Filesize

            18KB

            MD5

            ebceb63468278a061ce4b95d12d723c5

            SHA1

            9bd01a59d1986883410f09a1fbc76876edf57332

            SHA256

            082cff6fd2437f7208af7ebd56b8961bd16761255c6f1214499e93975301b300

            SHA512

            f20f9888441caafb4e23d41e00282fbc37593d0492aec86bf7840c9b1136d070202391b809a70854634a738611017ba85f5c354a9983687277f46032fd2cd91d

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-processenvironment-l1-1-0.dll

            Filesize

            19KB

            MD5

            66012263fdc48ac26001f3814bcabf20

            SHA1

            2839fca8a2eab6eef2be42d06fe903d24fbd4b7d

            SHA256

            a10d248ecd4a326912a390066bac1314715ee3801332f4a9c64b5cff264883b4

            SHA512

            5e3eab7bc734e7c2936ec061ac7702f1feda6bb772bb89e9a17b06dc722db226f9913ca4103c366be303070a879eaac4a41c8568a678347dfd170b69539f4e48

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-processthreads-l1-1-0.dll

            Filesize

            20KB

            MD5

            08d5b94e8b88fc6aaaa67969b03640e2

            SHA1

            6bf348389a0a1ecd2a8e64a67d64433e264e0313

            SHA256

            93bfe4c4663c0a2807f5cd3be67a8a21dc93c5b097b934c17aa3cb4c4374173c

            SHA512

            58d09fbcc4e7c3ca1cb2ec2f9928629c18c0ac3603419e8ba02faa3adec33cb8285d5199785ff2049461ce04f784035c5c0d651b02f58d93e7e677fa9932b849

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-processthreads-l1-1-1.dll

            Filesize

            19KB

            MD5

            94015263f243bf376bf138dfb1cb7b46

            SHA1

            3938fd323dea0686a83daba2da70060b5def2036

            SHA256

            85f410b3c539aaa2ac8b5be976af982a8765fea315671badf542c5a0c71d600d

            SHA512

            20f86cab8de07309cc64aece34ffd334ae74a847afedeb48b93848381c3ff721c18270bf0515171c213b9260936960fbdab4f67c3d3211f27b7bac34808f88f1

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-profile-l1-1-0.dll

            Filesize

            18KB

            MD5

            d6f950aede59a00c9ae0affe0b63b6a4

            SHA1

            abd6bdf43e4f3569474a26a7763327baabf155e0

            SHA256

            8bfe8d485bf8e6bf91833f6cf61e5f054f6edbf5dfb2095967ab3db0759d59a6

            SHA512

            bc37453defe631089159b0f3ae9fe9eaa43465b32aaa88dd31212d0e50da01823395e5875447c9a2e7cc2d2edada1f62c0663b8adf0ba0b72e552715fd787a9d

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-rtlsupport-l1-1-0.dll

            Filesize

            18KB

            MD5

            e2dc3af0989b0f05159851ee4453cebd

            SHA1

            ec902ec05b855388c9a7c2a336f0de30f817d49b

            SHA256

            6c14cdc684c2dff9170de29533c521f58c3501eb8cc088de9c9b930eee048c5f

            SHA512

            66b7eed319e92b9f87677496e2194388d291a520201c9615c139821981b7615713cf90fbe2479a45610bbaf8dc30a8d5c9ce6eb57a27645f655f4d3eff340fd7

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-string-l1-1-0.dll

            Filesize

            18KB

            MD5

            1292ae17b93cc2f8504d025fd1b71a01

            SHA1

            02fd7c6e25bb418738ea393ef7003f770f8691a1

            SHA256

            a03360d7024a4aa1013cc2cca408c1343666c7dae6bff61501d0e80d44cfb759

            SHA512

            10c0b9d8264918522eef08afa51b9d19e365d0664d7da6c6c64cf37627fa60b5603c5a47a5a4963c44922fe5d4fc3f19a549ae216e8bad9e4da3c671cbe67434

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-synch-l1-1-0.dll

            Filesize

            20KB

            MD5

            230070639ef8c8833d67782526d9e8fc

            SHA1

            2ca8951ab202b8f2bf289d9ea08af74695626baf

            SHA256

            139736ebca31050f4ed7339a6979595755df0acce0cf97097cdfc937de8d32e1

            SHA512

            b8daa7c3365bc8bcf7ff76a3002d69e3c39ce0a0c052353317242ada8bad899ad034a1f079f9d75cf0dfbd6e680c2cf77dd37ce231a39217996a3bf89c6a2e47

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-synch-l1-2-0.dll

            Filesize

            19KB

            MD5

            e38bd734e85d06860085772a7ceac43e

            SHA1

            4c8c141c63462ff5400c8d961d4f05e4bba0f66f

            SHA256

            e295a8633b5eaad0ab47707059bc5dc5da02dbea01b2d3c4bc8a19e466abddf4

            SHA512

            8c2ed8659b5e1f9bc871c8697bcf99ba9291a118586929af3cc599454c4edda88b4ccba2f0d824cb8c62c08c9966cbd5ac78f3a475425fdd4c35ada7cc8d7edf

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-sysinfo-l1-1-0.dll

            Filesize

            19KB

            MD5

            f69d3b75d2becfc53a29ce3decf62fe7

            SHA1

            28ad9523af0b3d569f959803cdc01f1dee87cf53

            SHA256

            460fa4cb795fab56d0949518d1c1d76d48dd55b3f9a02b3db421e79f98a64619

            SHA512

            f2653f4006ccee2a2e06227e75a95c0a702a625622311f5879a3b689078bfc623606fd7e4dd051f9987c624e922980c4c3a7c4852ce8cfc98fc11aa7115e4ac0

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-timezone-l1-1-0.dll

            Filesize

            18KB

            MD5

            4dab6a8fe6c24b68fb16a3a6b58c1faf

            SHA1

            fc0a753b747b8d24a1e2ef0c59a43b855c35fe9b

            SHA256

            cfcd287ced91a432b1b0f5f30eb4f9bf6409420b3994fb51c87b0b4ca21535b0

            SHA512

            69a9fd4134a3e09b9f22f660d8512fa2894684d6dc692d12435a7c4f73b0edabec7427e86d83519b43a544608850085b83cfebe26ffd0ca687f6cf491a5cf902

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-core-util-l1-1-0.dll

            Filesize

            18KB

            MD5

            1d9c2a07188ccfaf5e0f550abd56386a

            SHA1

            5d24d2af2096b078af3a7af67c7977fdf3d72f07

            SHA256

            a6f1d195bbb68a168a07f95c273e89fe5a5eb02bac3ac76dbeb46ccd7b85ed72

            SHA512

            7fa9c78527975c6e5cc42170eb02f5d706a6edc6419484fc81cf0548fc129039337b756d5bdae942f3e5b545ed540559df5c37cb287cd24ebeca95e7464ac670

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-conio-l1-1-0.dll

            Filesize

            19KB

            MD5

            be3a982da0d0fd0b06d08ba4bb75e608

            SHA1

            ece449270ac8ee8283003a5ce3faa48ed63c0435

            SHA256

            4ab9e0da1f2c4994b2f9c9debd4f543c3ab2404d13666816d7c4c74aa1ab2e2b

            SHA512

            acdf9ad191075d3c392a8144e0a8ab5afd4fcc5f6a647f697b305cfd70cc646663f769c9c19b04d89e3f62ab5b19109e0c79f32ee8ea52ecc0091a7597e97234

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-convert-l1-1-0.dll

            Filesize

            22KB

            MD5

            c08072b6f3943d9695fff0be053b7296

            SHA1

            8f41ca441cc2deb670ffd7ba851956304862f5b5

            SHA256

            c580b0002cfcfaac2449085b26df4dc13fd92aac7edb580a9133f252534abbe7

            SHA512

            c8cf719ba70919b0dd5c0f8d3010c4c7a2e6c893a3e7f22449c8713e8ab47c65a5784550c58af4604f63806ab33d5e4fd7a518c3034628c1bf0d2c5c6c715cb2

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-environment-l1-1-0.dll

            Filesize

            19KB

            MD5

            e5e1a3ef0c1cf856dca6f71c239bfcde

            SHA1

            1d66842144767280f835811644980f72dde28edd

            SHA256

            3c56a518dac09ff5dc34d99a97129051ddc93a1c907cca8274e8d08aa9f77e3c

            SHA512

            d885ed122f58026df16668df16cfde5d5cb81b51b9154305c3298cb4d6b1f5241a91a65c332c8d2cbfb8b5ff4faa25d2b085cd43862ede6397aef8521347b20b

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-filesystem-l1-1-0.dll

            Filesize

            20KB

            MD5

            4265854cf7082a0effaca9913ba1b584

            SHA1

            68ae4cd0f36c3b45da8810c7fe802feefc528396

            SHA256

            e861fbd1dd21bd09bede9ef4ced4fe32c1dd5e72f9d788cd41b7314290a638c5

            SHA512

            64c233c4922e6bb7982d4866fa20f7542c330b4b3a565720bf3dad97829cf85997f05b9c13656fdb52b93cf889e6450b02efe5a62ce3737f3d30e047313cb19c

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-heap-l1-1-0.dll

            Filesize

            19KB

            MD5

            b811b6df1b996ecb5bc65ccb5275e3ce

            SHA1

            add783af63ed7453abcc0e7789bb424d1f3d5aee

            SHA256

            67a11355b9edc7cf9dd2e1e73ffbe00e00156926af8c93bcc1e254702b9ffa24

            SHA512

            b3eb1cee930333fb257c05ef273bf963adf7ace6b3ee172b65db493eafc60e382be3d3330317cadc03e9af1a03d1ae1b68e1a8ee2e88c70d33241e44ddb5b6de

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-locale-l1-1-0.dll

            Filesize

            19KB

            MD5

            776384baba12ee60dd9caa8fc65ac017

            SHA1

            648aa40d1237fe6e9c19a14d543ba9cf3e9105a4

            SHA256

            54ad6fb80f28a8cd4424424f413c8f22a1cd6a617eb759aba2f7c2e90cbdc4f8

            SHA512

            96fecb891ee0d951eea77a1f7f587f8bd4bf1ec152340ac005e65ca42db33cca988b32477dfb7f8f2c0852ade748f42be5017182c7a7a02b2633aee6631bb147

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-math-l1-1-0.dll

            Filesize

            29KB

            MD5

            c45a47b83a34843225ecd6dda2114af4

            SHA1

            3c89bfd1fc20c1dd68fc2aa3eef98b97007d73fe

            SHA256

            101427a9f932d4160b3c9be04065d495576ab40a8109d9117a4d33f8b542a30d

            SHA512

            173817ab46a55576ea4e3b540e61d69200335389a9f3366f17b36e6d0ae9963f4b0fef8e62e7dd0776ef3d23f3284b3b5ef9e505d2b67b77f41ae39451b51583

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-multibyte-l1-1-0.dll

            Filesize

            26KB

            MD5

            94d26026d6b10f2cea7b6125813471ba

            SHA1

            c4463518bbdf7d9019c822cf365455c562661632

            SHA256

            f42cfc5cf9682e31404f262d9954f7e4ba6de35a510ea7d7683097663840cb45

            SHA512

            2de164f89b22c539e2927c266bd2e8c21a0af2dfff338d8dda26e3108318338a296061a72c528d96e75c893867e65144174921bbf4464be32a6ff11cf29fac1c

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-private-l1-1-0.dll

            Filesize

            72KB

            MD5

            d7d5dc0cc105ea8cf525862b4567637f

            SHA1

            fb651705e958a9f2a436013e567624f18eba85f5

            SHA256

            705e20df0cf4de0299072b7294ed57302b26ecb76d409ed7ecf2f2fea3d59947

            SHA512

            515472b9604ce7f05ce70f9b3c2b0b84930de956534fb8360cd6d107577adee47e8e85d99bbe4cc143f1a8ce6605f4261f4c85fd445b7e89de3f28c28d42a41a

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-process-l1-1-0.dll

            Filesize

            19KB

            MD5

            0b21712051d25cc0666f5e6d41b64bb8

            SHA1

            1d37f8f1facaf3205582608a9de3c3d212ecde0a

            SHA256

            5ab5fc3ba961a43d6d100933178121a7d8486b936f5ebc5e276e739f2e1da5b9

            SHA512

            3605f4902e08c901056071af76e09abf6e95572d69b6b0790f36be1dde7b79c3171df7fec229d51cd508abb0768200c195feb8f424e524c981242b43d80fca11

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-runtime-l1-1-0.dll

            Filesize

            23KB

            MD5

            fb2dc78b138f3fe4b7e5b3a3cf9760e4

            SHA1

            e9a82189ba821544bd63f5af6d78e757dce9a8cb

            SHA256

            d92e0f00c59425e74ed419c158414e2c1e34047d10072dcb9215a5c91b4050e0

            SHA512

            1c0760a0dc6772b090fac8990d3a218f7c1c85d006e901896fcf09d2df34f6220e8101866ae627c9446d2169913b948d4724ff07af4b75cc3513a5dfaf9c9bd0

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-stdio-l1-1-0.dll

            Filesize

            24KB

            MD5

            125c4539da3d6aee3a2942bced7f06a3

            SHA1

            7dcb0f9091831e017af66a7a21cc80e71ad8b804

            SHA256

            4ba617cadc3806532eecd00957b2329ea8472224891228b99da3aacb002b75e9

            SHA512

            bd506a780ea711117b159ccfd167c995861964553f9091fbe386062d1b9bb75d79db8001601130973c57ed26de9bf2b666f61f0e4a247086ec8942e03beb5ff6

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-string-l1-1-0.dll

            Filesize

            24KB

            MD5

            290a004945b199b2aed82959b1623626

            SHA1

            f19020da6f6b99045b912e45cce1c0e00bdb6efd

            SHA256

            c6aff750c97c94a594f6cfd6db2998c45e3c0cd9b4f779df1e8e72dc7b606534

            SHA512

            cce8c4f606508aa90e279472107816337355bff09459db5175b8ae875dcdef26be09a82d498c09c97abdd119a72c1b3d39a1a40d97b6cb94c746217f0d72e1c6

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-time-l1-1-0.dll

            Filesize

            21KB

            MD5

            dfd30f7dd0c43184de48d97d16cd5b41

            SHA1

            4462932615fb930deeb610f1354ee505845c7f82

            SHA256

            5baa7efce0f3739812913e1a24d1cd326cd1fb53058719b415c835ecd2840e8a

            SHA512

            54c2101c6b404a5e77534bcb7ca07ba56af3ad7404b262339081e958df1b928eaa76a3542d17331639ed0fb2ca2b92ca714ec543a53c728be0e5130cd064d179

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\api-ms-win-crt-utility-l1-1-0.dll

            Filesize

            19KB

            MD5

            156fb885f50d94624ca16289f21c1d66

            SHA1

            401e0ed9537cb1982dfbce4d869c664c22df5839

            SHA256

            d793426ab222bdfc51f136f07663cdf34b31847ee32241e6f3589b3fc1886c22

            SHA512

            8b03a50a7192bc35342f1c0e4c1931be8a60b29735d1dd5debe6f37b443cfa9adad5846ca5e2787e19d52cafe8a1f4f872f6858418bc00ad2612436d6f9c49e0

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\bugreport.exe

            Filesize

            665KB

            MD5

            b6df9544be07fd144d6909ad3e07468c

            SHA1

            c408f12fa3bb298ac5e1db87ad850d4e5bb99369

            SHA256

            a6ffc2f6c4b4317b081c1884776f89659b8b31d5bbe6945d08cc905f36f43bb8

            SHA512

            6947a94599715104a258c4ef8deb6d762f3b6c1a0cc3cd7fa11b7bf33ea85d9cf6fc9a90757a593193b055ad73dd7de6df05691ecd80d4b7dca9b63526b2e9de

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\msvcp140_2.dll

            Filesize

            162KB

            MD5

            3a28743d8c814cf347398ea2544a298f

            SHA1

            2530dd3f6ce41942e592f926dd30a08d8de3ad81

            SHA256

            8aa3ddacd2b2cf998e5b641dda4bfed07f689849521a6794e0db4f9354d3edb5

            SHA512

            238ed143f46c272377df78e7a1e33a7239bef7013ecab37e3ce93fd24c640ec62648bbd7ff01be05c147aa9576a0baa4e5a0ab978f151ecafb1c33f4eec308bb

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\msvcp140_atomic_wait.dll

            Filesize

            50KB

            MD5

            792b0131510130442bb66c3a7d12ae90

            SHA1

            62ddb095d7e07020a69ed5ed704778a92b0be976

            SHA256

            bb2981af3a123a95822a55c0bd3c470ba6ed6c0151ffad09717583fc6abfcba0

            SHA512

            38de9c71d9e95aa1b2ee31972c8a273afefd2f124de0ce3e6f247b123077db4a374aa32ca9f8b786fea4910119c71f1831af5f4c0273ea93b5e860afdce7e0e3

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\plugins\QMNetMon\QQPCCommonMgr.rdb

            Filesize

            8.1MB

            MD5

            771479bf1c78e5fd05207117d3e09869

            SHA1

            597f017b03d0a7a1931576b0fbdde4d0a1e0e813

            SHA256

            47184397758dcef922073b0db919509151ab46725c37418295b8036e1c3b1730

            SHA512

            1c4b7894f09e2019e8192fe3116e5c1905a4b0d1438c4a097a2631696b06bdd1de0b9e98813b44724be6aec1b63dce3439e6d93d33c2cba21c29cfa005a53a39

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\plugins\QMNetMon\sqlite.dll

            Filesize

            350KB

            MD5

            52023600a39f92454b5c3854faec37f7

            SHA1

            44d37d614896d045d628bc561f691abe801f434b

            SHA256

            767e1d26e65e5a792a29d9d66c05a302bb1282fd0889494d15da4a13102b8f46

            SHA512

            323f2d22c1196eb1040c11452b4a225424ef3fe6cb32ea24a2ee8c2738f848b759fe4e7a1c45719bc478bffb4365b0fc41bba99824a148b20ac7aa27daa3caa3

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\plugins\QMNetMon\xGraphic32.dll

            Filesize

            530KB

            MD5

            ddb7d1d960f52573060e5e3f9531141f

            SHA1

            c58ca0e64e24fae2f5a789bcac548458542c2b0f

            SHA256

            acf52236abd117c28073bc383b5cc0c8095d2daf54de04a3df9bc4c30b611203

            SHA512

            2845b43db1f8f3c0ad75ab43381d61ebbec423ef36f1434f8a39028db6d01179638692058d44c4565f5fd9967ee20a0890a37385cbe3bac05d7a4189fd84c837

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\plugins\SystemAidBox\libprotobuf_dll.dll

            Filesize

            2.5MB

            MD5

            aa5ba207320d9d5429761e84d21e6263

            SHA1

            8d411b2966deb6206959c6b0467121dedf2953ec

            SHA256

            11e2918475241452d88d3bc140bd348ac55cee52bc308f0e741c7313c32a0e98

            SHA512

            64b862f5d74c2c86782eb664ca813bf53a92aa7c0c96d18e9878759512dea5041809542ef701f4b324e4fd461c9c5f672d14d7705cacb786e37f8866ce0a0e05

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\syncpolicy_10.ini.bak

            Filesize

            1KB

            MD5

            09255ca507618e3c507cd776e0ae3207

            SHA1

            da1f98a2c32533b88ac32b483d8069f247b7afc1

            SHA256

            7568567a413ba2e5a846b375bd794ab8c5804ff4e03189639ba5ae092f340271

            SHA512

            400594fb91624d7c019847e8f6270f5b1508f94327ae9dd251b17cceec32b8857cd5485382ceacdbbe94ecb4dbb0b534859c3d6faadd6b1d33f8df26458833b9

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\tpk\dll\1733238797\update.ini

            Filesize

            6KB

            MD5

            8dc0224cf14a11980d59d138e6469935

            SHA1

            6457fe3e4d413b74c4d6a7ac53dd03c23f4e7cb5

            SHA256

            d052f3a67159bac78ea7c66de9b36ebc311e6a41f16626ac3223467d79b5ecaa

            SHA512

            cdddca8b7fb5f833e531d255e9b507b13da78067e75dd8aa726c8f38486171d0d6cc9b4b79e822d8e3fc272e1e35a111bb375a835b30c1483df63954e895c80e

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\ucrtbase.dll

            Filesize

            900KB

            MD5

            d0d8cf4e5302fdef07168d7ce184de5d

            SHA1

            872b72e0910a3d5f142e85c309ed4295a8cbd95f

            SHA256

            1ff49fa3db1b3aa78459544594f72f7aebf2ba285476c2c8a064bd887ea7f565

            SHA512

            a7569fcc47526da6532d97244172596e8d3900f2cc142709c0bb95ec2447dab5411ae0cc9bbf430470b6734781c5bc748857f5ff56d8a82980e93a40a5a86a09

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\vcamp140.dll

            Filesize

            390KB

            MD5

            f89482c2c8a495993e2117d5d1bdf442

            SHA1

            fbda41c9a499f9d82e1cf69d06e4c6e16895f0f3

            SHA256

            aaa4364b8fd322f8878d91f8b76319ed71357e2a7e91d0f732d7857d067ceb2d

            SHA512

            121f882af64fd67afa86d0ac1b6b172b1dc9720078a0f6744a5c778911f22e4dd50b0c9d5509307c393dcc1131b3b5eff6d088da8d4c12d309b3facdc46a334a

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\vccorlib140.dll

            Filesize

            261KB

            MD5

            56c2c3a73f528f95a1b70f68d3704518

            SHA1

            40d1c3cb0a3d9a35ec580540ea6bae39fa6b8261

            SHA256

            517bd079e0108d150b6f3b42afcc578fc5ca690ee8dd0f638e23eb0df07af8a3

            SHA512

            5bbac3d08a1db6dd249c12b65dc49423ee6d12091d058d608b1eb193c7d11b0ba35c591041b721b35f9fe2cfe40eafd7c4cc17f06509d11dc615a9c34d7a17ee

          • C:\Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\vcomp140.dll

            Filesize

            135KB

            MD5

            49b855efea2ebe9e104fefa017cc9878

            SHA1

            29448f4b8d7678ba63a5c8e1fd3585a19bf307bb

            SHA256

            ae780948e9ca4e6968dc72a2b32d55409b685e4326db735b0679e32512506cb3

            SHA512

            774429a80c04e35037a8494fdc0944f3dea22bd0610b1534847764e669025c90b1a092ca2c9d3a5f6c065fbb869682b9a5f22fa860657ce3a13934f1e9be2005

          • C:\Program Files (x86)\Tencent\QQPCMgr\Plugins\PluginsSetupBak\QMDynamicPackageSetup_17.1.25794.211__1725540070725.exe

            Filesize

            6.8MB

            MD5

            63398e6bcffcafcb6d34c0dd1445b749

            SHA1

            68be9b20d880f8f5c3167c5d4cb4bb40ba141269

            SHA256

            c795a5afafa648e79740b00ec125e8d7c84dc7f05772245bc415cd665f1aebdb

            SHA512

            10f3a2158480e898dcbee508371d9e657287fdac9833b088f7c822ebfc3dc877d4dfeb6d96370c646050b8b827e5af2ebd5351f17ae37fe653d617694bf12700

          • C:\ProgramData\Tencent\DeskUpdate\GlobalMgr.db

            Filesize

            190B

            MD5

            05e55866faa1b549496e3aa7eb017e02

            SHA1

            129078dd3af63b06b91203ebf62774d46e244cb3

            SHA256

            65aea52ea4a5aa44551a6b41a0204ebe181ec22f07f3323c718d7325aec0e11d

            SHA512

            84f610a331d388a92b567fe3a2f2aaa016fd53e0f580a0fefe67bba829911e514ad4ac5054ae606ea7c761ff6a8ffecbe8971c671d2bbf533783e57d59f46e36

          • C:\ProgramData\Tencent\DeskUpdate\Guid.db

            Filesize

            1KB

            MD5

            f04fe040cc80b4c7d784e2674e72808e

            SHA1

            71ca2c3973fc97169384a35422da116c3c7fba81

            SHA256

            34d4a7d2bb690bf422e171a76aa638ac37f22c104fe1253dcba3a9ba08787b8a

            SHA512

            f8f17426fda18ce16432ed5fbb014beb9d87aca33f60a7fddd6d6f259696997f0fcadfe5ed1bc9b67c4ef5633fe4c3cf55f446b229b95fb5b215638defbbdf0e

          • C:\ProgramData\Tencent\DeskUpdate\Guid.db

            Filesize

            1KB

            MD5

            46f10cba573193cc6894e757eba8bd71

            SHA1

            c309498537d76eb68dca72eb5d39328367a9390c

            SHA256

            9ca77ab90bcd38f51b7e59b7df8ccd4713e34a7be077ffe85719a5fdf63123f9

            SHA512

            a8f9b34924f38175db33d360a13b2d47922b566a91955004aa9e56e14dff6b46de74340d7c8e0da559a2d7c2e8fd3cde51fd1c8c479a845b236783c557cdf1c0

          • C:\ProgramData\Tencent\DeskUpdate\GuidInfo.db

            Filesize

            240B

            MD5

            05c22578eb6dacdb90b0c26fabd4bf7c

            SHA1

            4a7039a8dac74be4566483f904e88544c6f6cb71

            SHA256

            f2401e21b30b23f67363d2b9b694ac61f5daa661309f8080b75261fbd17abeff

            SHA512

            0452a2593709a30283aac5f74267710685a35609d0ec74e42870728293aeb09f5d5e6955299bd8d252f8bf11dc0be3ff8cceffde4de94bb5fcc300c51ad03bf6

          • C:\ProgramData\Tencent\DeskUpdate\GuidList.db

            Filesize

            221B

            MD5

            786870bd24c0f59dee5431c921528ddd

            SHA1

            ff0aff759bb7f52df34e1b4819052a6b52b9d1aa

            SHA256

            1d1644791fe6ecb1bc3be36de609c4b79fb5006f605010a3778c5a42295a1260

            SHA512

            a186ad65a4cdc70caa7ad80ddf1c19b02abb66c7ec62fb42ff0f7b5f1410c99aad47f30e0a48a485c46b9872a9b2a0d5d289cb8a498546d3b03a7eb97b6d9b5b

          • C:\ProgramData\Tencent\DeskUpdate\GuidReport.dat

            Filesize

            1KB

            MD5

            b051c9332b63c4b12642f48f0e7f37b3

            SHA1

            184a2c77e4d5f759d09ba51a210f6ea3446c9763

            SHA256

            adc726845b28772073bfbad279a7357865ebf0ff7db13e4aade0597bc787972f

            SHA512

            6ba6743d602daefdc1283331bcbda049ad5767df8289bacf7f5e62844183423bf1922e523ae69cb83ec9a514e0985ac67c593c99b26874484fdf34d3c1b520c8

          • C:\ProgramData\Tencent\QQPCMgr\AdBlock\AdReportConfig.dat

            Filesize

            103B

            MD5

            5ad36e8c73eeaab39609e10651c74c2a

            SHA1

            7b091b6ba9b341de2331c5327cb229d5f4693ba2

            SHA256

            1da424af92e8838dce6931552cff2c7be3c0cdcb6ecfaaf03e3933231b689d5d

            SHA512

            6b4a6e7c6b957440a9c26210c9559bbde7d80d680a7777390818f85b2e5cb2b70d6b27697ddde6349d3f0c2e14aec287ff320f257c7d7337c09e2c674d7a7fc8

          • C:\ProgramData\Tencent\QQPCMgr\AdBlock\CommonAdCfg.dat

            Filesize

            5KB

            MD5

            ff1627a2018f0a3c8795775150f6f621

            SHA1

            3af739271d4dd920e607a3b93ad36a6aaebf0e83

            SHA256

            ddd1574e4191b07b9ce86c7f5033bcd15e5f8d88106fa4553b5c8564983edaab

            SHA512

            026490f2012b0b93f49fc19a7685001b29276e6cc9f75731e0944eec6a55024c568176713113efbd456fed2b7c7be5bf4d39b73c673f7c172c07be10e82261b9

          • C:\ProgramData\Tencent\QQPCMgr\AdBlock\DocBackupFilterCfg.dat

            Filesize

            715B

            MD5

            af256ebac013216757de9bd07cc60c08

            SHA1

            aacebb1f705f122afccf1f5cb18110a0479e9f30

            SHA256

            374fd0bc4bb17e72ef900a1415a2aad55523ff274b6cd8b8f84277ea11939565

            SHA512

            e5947fdce25d1652c96831da94c258f4fe5f08c21631196f3bdd82da2ba881c8590262c614e267e56f8d395b61a8d7afb2917b64c16e31dff74d8f5b255f3143

          • C:\ProgramData\Tencent\QQPCMgr\AdBlock\adconfig.dat

            Filesize

            162KB

            MD5

            4d37646754e68aee454b25c9cfed093d

            SHA1

            3bd6776dcad7191a2e69c2e15a766a96f33430a7

            SHA256

            4e7415c1b9daea61963522b5257c4fb8bf8b0621692f3a846d03dd91d641f7ef

            SHA512

            0d73966160d19c2f7339265f9114e6b97a8ebb7ed0d76a8d7788b5578db0bfc86bf139fc7dd046ff7ef86237919af5c9b85ca5d3ed9d842bcda056053e4ce78f

          • C:\ProgramData\Tencent\QQPCMgr\AdBlock\networkdefcfg.dat

            Filesize

            1003B

            MD5

            65c2a2216ee8fbd53b99b4426cefa5ab

            SHA1

            d5886517bec2b61a8bed699f0d267e07f01c2db6

            SHA256

            3840eb63e5e69f3e63ff4dc85f67ebf7c9d5d4f93c7cba84b8b30a00c047b4dd

            SHA512

            11a3a0f7203cf32c025a7bb765da369303e62f944d5895366c09351dee6853c1ffe45dcc6223ad3b7d7d31aae24492cf0e641476370e68e6b28594c04cce5d82

          • C:\ProgramData\Tencent\QQPCMgr\DatabaseInfo.db

            Filesize

            12KB

            MD5

            b5ebc8e133bde1042d5d1bfc86a96322

            SHA1

            608c872978e86e4f69e896e65230299321d644e6

            SHA256

            f481a86548061fbec469f161f9f1e069a1fbdbb490775927c1c348543a861a9e

            SHA512

            ef96b7e7db7ab8dbfb3ac62b9d809cb7e3195a91c81c1d78c02a639aa5f8b28aeae9b484799cdcf4823230cdeaf5003c0cdd317739ea06462b10d355e9fcd73a

          • C:\ProgramData\Tencent\QQPCMgr\QQPCMgrInstall_20241203151252.Log

            Filesize

            4KB

            MD5

            6c676d8ec4d3c0ac6c5a0f011a160d1e

            SHA1

            43cd9b9f05a79dc91d6fab3c953a861346b2d2c2

            SHA256

            360af0a1c01f672ee2ca80f439fcd6264f1313a450346b5f6b319b593c6fce6d

            SHA512

            d7af17f6f1b8e1b6985d2092513eeceeb7a67c3a615aa8d5b5594e0f9363b19af86533ba9da989a7de681d615f704b5dfc6700afba74eeb944684563b2b9350a

          • C:\ProgramData\Tencent\QQPCMgr\SmbDatabaseInfo.db

            Filesize

            19KB

            MD5

            892f7f403a028b007f4d3c75a272bb3e

            SHA1

            e1de0e0008ce64e294b01bc67a72ba94024ad069

            SHA256

            da32a751dfebd8ae26b014c40c1b7e4f3e95ed2ebff7cc25cf24526f257896b7

            SHA512

            1ebff1a6a0f87025b4f93ed13c5a588df492daaaf27bc580304b41c20b8eb27f0eaed905d18774dc9b59dda749a90c475113e65009a7134eaaf02bae02d3128d

          • C:\ProgramData\Tencent\QQPCMgr\UninstallSoftLogo\1172516898.png

            Filesize

            792B

            MD5

            369bdf918fe05e05134aff816102889f

            SHA1

            118dbdc15a0870a5e810927fd7a3488434474277

            SHA256

            2c4f027971c6a5e2ab73ee252f31f99f69496911e87c767549af266826d1eea8

            SHA512

            d452abd796be9760dbe4ef77d625f41ea9d9ae0f3d529f58814cc23ee0eed509ca7d56e40c117d28e51ec849ee0c7322ba894f95bb75178cbefb2302f01c3457

          • C:\ProgramData\Tencent\QQPCMgr\UserPolicy.db

            Filesize

            2KB

            MD5

            c516e5dae9634cfed22b43b2bafdac55

            SHA1

            336fdaf74db0295f65e29fb9f37466f2fe3e26fb

            SHA256

            d21d1ac834ea67c3bfc4201ce96880ced02fa77fc86849494396a7eeaac82d93

            SHA512

            310388768314aec4ba6526d766226a9fd125f2541b7b72e5b691a7891f24eac0f3d526f16830b451494ee2e15a230fff862c1cc4fe8e7e7ccf7557de2966953d

          • C:\ProgramData\Tencent\QQPCMgr\UserPolicy.db

            Filesize

            4KB

            MD5

            0d8c1dc1502cdff35a56aa1dca5ce5e3

            SHA1

            6cdd283ec7e3aa62c7b800c74e8032b97fee6746

            SHA256

            56b1f6bf2ad76c284f81d2dad9e68a2c080d0c13d3e8981937322ceeeb3318e8

            SHA512

            8348724033e5ecd276c314ef44d3de12f55f6a84490b6fac0aab2ba866fe68d15a460f49fcc1997b6ef9f174e36bd5c8e1277fe4bf5d7948337861d02b834419

          • C:\Users\Admin\AppData\Local\Temp\CabB195.tmp

            Filesize

            70KB

            MD5

            49aebf8cbd62d92ac215b2923fb1b9f5

            SHA1

            1723be06719828dda65ad804298d0431f6aff976

            SHA256

            b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

            SHA512

            bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

          • C:\Users\Admin\AppData\Local\Temp\TarB30F.tmp

            Filesize

            181KB

            MD5

            4ea6026cf93ec6338144661bf1202cd1

            SHA1

            a1dec9044f750ad887935a01430bf49322fbdcb7

            SHA256

            8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

            SHA512

            6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

          • C:\Users\Admin\AppData\Local\Temp\nsu2BC4.tmp\System.dll

            Filesize

            11KB

            MD5

            b9f430f71c7144d8ff4ab94be2785aa6

            SHA1

            c5c1e153caff7ad1d221a9acc8bbb831f05ccb05

            SHA256

            b496e81a74ce871236abcd096fb9a6b210b456bebaa7464fa844b3241e51a655

            SHA512

            c7ce431b6a1493fd7d1fe1b1c823ad22b582c43c8eb2fb6a471c648dd9df9953277c89932c66afd598d43ea36f4a8602e84cd175115266943071cbc8ce204099

          • C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\强力卸载电脑上的软件 .lnk

            Filesize

            1KB

            MD5

            27da4c4363f82d8529505188c11b2406

            SHA1

            9d4a65aaaa0d3b537cf31bbc55a1b4b34ed00ab2

            SHA256

            b99ca0a15f4f9c11aa2dd638629fda6fc2a27c898426af637d68249cf216caa9

            SHA512

            7799418c90cb502a0f3ebc50f69170ef65686a2057bbcd56bf19ad2ba34c1617fb42624bd02916880072a5197aebf63cbbc5d388aca42897edafd0245f1b61bc

          • C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\腾讯电脑管家.lnk

            Filesize

            1KB

            MD5

            d6db4a85efa96d3ca0e312b03134f282

            SHA1

            a78b81846d83d942958776cae3fd9f9cf7263fc5

            SHA256

            8d41b0539dbc304d7ef3a198776ed06d0098c4c14a85383bda7f9ba88ec10ef0

            SHA512

            e8038a4676dbcc1dd0a712ad722723bd990bbac8a830cce1fe3d9bab9f22da20a5787890444c10d891b3e91417060092e70d9a686f1458b41a90613cc903b272

          • C:\Users\Admin\AppData\Roaming\Tencent\QQPCMgr\QMDellog.dat

            Filesize

            1KB

            MD5

            5343380352f922e51b65dd8d459ab8f6

            SHA1

            fad48650947f8d63c5809fa56bc48787f7946ab6

            SHA256

            24ce818210937e6199539ad5217e31fec5717938c8517a0d270985cf71834b29

            SHA512

            3471e75c580cccbe3817b833a8294d4beb86da1ddf315dfce60fd0b706773f5e7ba3a36825b262e6052d399104b7814e02976d267ce2130ac3ca7c8792f4ecc5

          • C:\Windows\System32\drivers\TAOKernel64.sys

            Filesize

            92KB

            MD5

            68ed082ccbc8753280689a96143b016e

            SHA1

            115fd8dcf4f5feaefdf10a696c90bc3bcbdf7b5e

            SHA256

            f197cf36d90fe7e572a14991040f4ed71c006d909d0a7fdbd5d8a6b3a204bdf5

            SHA512

            69a8ddc4df780a8041179130d82202e8e41a800f163d361ce7b74aac2574212546eca2166d9f89e18b4c118ba6f95c57dd6f02af0cdccfe70b8ad872cfc28001

          • F:\wicg.exe

            Filesize

            97KB

            MD5

            01bf6d8e31adfbec92cd9dfa7cd7b92d

            SHA1

            c9102270991685b8643dc12215899304d85927e7

            SHA256

            e1b09447d8b3662de6c374d3261131ed096a03691e8c24e18d5b293e3c20cb6a

            SHA512

            5f1dd4b605f1d54cffd10ca634986a5e420a829e415d149c835b8663fdf633c1f11d94cf445771e04c3baf68ac320882b6f3a4d308ef9b02917391e13b49ffc4

          • \Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\QQPCSoftCmd.exe

            Filesize

            276KB

            MD5

            ed0c2a36b1100fd8ae1767ca802730b5

            SHA1

            37811051b47d64e42b6cdc47694828f0da4cfaeb

            SHA256

            fdf48d171db4c3a613ae36cb87a85b26a73bba64bd9b2cfdfe2019d41e485902

            SHA512

            1ab13cb62c04578cc76a4951d962f99eb180c830a845c25eb962ca86005aadb64267cc5cd3bd1984976c81d86719e39f98c3d46ad2c13a0bdd3dfdc12a0544cb

          • \Program Files (x86)\Tencent\QQPCMgr\17.1.25794.211\beacon_sdk.dll

            Filesize

            1.5MB

            MD5

            2a14c02dcc60f34fab308dec7da42255

            SHA1

            6533f3dcf562d1c55b26cdb34b6c119af85463fc

            SHA256

            6c446608f7abb35101c048a0c57679dee326703a5563902531f1ab2916568c5d

            SHA512

            87176ded37dcb5f9c1834a99bf8200f738b90231939a5c894f6b12ecaa0e3539ca44277f9dced55624a0ce262b6e54118585a0590c4b400e04e6fac07544d2cb

          • \Users\Admin\AppData\Local\Temp\TencentDownload\~f766567\QQPCDownload.dll

            Filesize

            1.3MB

            MD5

            8eac6c3146f7d8db62a773e32bc6cf53

            SHA1

            a5d3ad50eac345e298cdb3b7f80f4966fb4234c1

            SHA256

            28d2477926de5d5a8ffcb708cb0c95c3aa9808d757f77b92f82ad4aa50a05cc8

            SHA512

            c3b9a21e0f649699401b5def8b3ec4939a336086d8f470d1d79c69ebccf9ffeafbe9133303d89bc6d0beb713624be52d93ce3bc3204bf62f91fedb2879f868fe

          • \Windows\SysWOW64\msvcp140.dll

            Filesize

            426KB

            MD5

            0a0042fe544c91cd57bc2f7ef40bb974

            SHA1

            8bf31f44ba3e47b8b186c3d8cc219a4d2f67da63

            SHA256

            4190f0a1306257ced4975448794e1d42be312e334ffccfb4910a4a39cde9df57

            SHA512

            c4c56c06cd40213ebdcead6a256510b44beefc3a18d7f84efebcd05bac7bb1b942f97b7f7798420ca8ff0c1592f32301d751554fb63125b4703feadfced2f6be

          • \Windows\SysWOW64\vcruntime140.dll

            Filesize

            74KB

            MD5

            afa8fb684eded0d4ca6aa03aebea446f

            SHA1

            98bbb8543d4b3fbecebb952037adb0f9869a63a5

            SHA256

            44de8d0dc9994bff357344c44f12e8bfff8150442f7ca313298b98e6c23a588e

            SHA512

            6669eec07269002c881467d4f4af82e5510928ea32ce79a7b1f51a71ba9567e8d99605c5bc86f940a7b70231d70638aeb2f6c2397ef197bd4c28f5e9fad40312

          • memory/1116-15-0x00000000002D0000-0x00000000002D2000-memory.dmp

            Filesize

            8KB

          • memory/2884-73-0x00000000071A0000-0x00000000071A1000-memory.dmp

            Filesize

            4KB

          • memory/2884-28-0x0000000003000000-0x0000000003002000-memory.dmp

            Filesize

            8KB

          • memory/2884-0-0x0000000000400000-0x0000000000490000-memory.dmp

            Filesize

            576KB

          • memory/2884-9-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-6-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-23-0x0000000003000000-0x0000000003002000-memory.dmp

            Filesize

            8KB

          • memory/2884-4-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-10-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-39-0x00000000040C0000-0x00000000040C1000-memory.dmp

            Filesize

            4KB

          • memory/2884-41-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-27-0x0000000003000000-0x0000000003002000-memory.dmp

            Filesize

            8KB

          • memory/2884-11-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-42-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-24-0x0000000003010000-0x0000000003011000-memory.dmp

            Filesize

            4KB

          • memory/2884-26-0x0000000003010000-0x0000000003011000-memory.dmp

            Filesize

            4KB

          • memory/2884-48-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-49-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-7-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-50-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-52-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-53-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-55-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-8-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-57-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-58-0x0000000003000000-0x0000000003002000-memory.dmp

            Filesize

            8KB

          • memory/2884-59-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-75-0x0000000007150000-0x0000000007152000-memory.dmp

            Filesize

            8KB

          • memory/2884-5-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-74-0x0000000007150000-0x0000000007152000-memory.dmp

            Filesize

            8KB

          • memory/2884-611-0x0000000000400000-0x0000000000490000-memory.dmp

            Filesize

            576KB

          • memory/2884-76-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-3-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-1-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-79-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-80-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-82-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-85-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-87-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-90-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-91-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB

          • memory/2884-98-0x0000000001EA0000-0x0000000002F5A000-memory.dmp

            Filesize

            16.7MB