DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d750fcd8d25a5e8900894b7842d3f79c427ae7eeabcaad1f5a8d3f8078882c91.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d750fcd8d25a5e8900894b7842d3f79c427ae7eeabcaad1f5a8d3f8078882c91.dll
Resource
win10v2004-20220812-en
Target
d750fcd8d25a5e8900894b7842d3f79c427ae7eeabcaad1f5a8d3f8078882c91
Size
732KB
MD5
8444abeb7d5dc0a7b8472494c1561f90
SHA1
e300ec8f867baa2c3246f146dc0ac21fa602a2d7
SHA256
d750fcd8d25a5e8900894b7842d3f79c427ae7eeabcaad1f5a8d3f8078882c91
SHA512
66dd23e59b412b196821af48575a2c90b48a9c05f9b3c3526670cf4e5326a6999179d8450792596ed03429503a39f120f033e9d5c83b0dba44eaaafa910e112a
SSDEEP
12288:x5JLE859UdpbCBXt2HdX0xNXR8ejuxIGiz7uqIN0RQELQ6:x5JP/UX+dwHdX0xBvxuqIKRjL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
inet_addr
?ChangeConfig@CCmdCodecBase@@IAEXHH@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
?GenerateG1@CComputerIDGenerator@@QAEKPAE@Z
??0CTXBSTR@@QAE@HPB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??9@YA_NABVCTXStringW@@0@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
??7CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?ToLower@CTXBSTR@@QAEJXZ
?GetClientType@ClientType@ProductConfig@Util@@YAJPAK@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?IsCSSubSendData@Misc@Util@@YAHPAUITXData@@@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?GetLCID@TXI18N@@YAKXZ
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownload@@QAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAV2@H@Z
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?IsDecodeReachEnd@CCmdCodecBase@@IAEHXZ
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?ConventAnsiBufferToBSTR@SSOConvert@Util@@YAHAAVCTXBuffer@@AAVCTXBSTR@@H@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Empty@CTXBSTR@@QAEXXZ
?GetBinDir@Dir@Util@@YA?AVCTXStringW@@XZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?IsFileExist@FS@@YAHPB_W@Z
?Attach@CTXBSTR@@QAEXPA_W@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?GetAt@CTXStringW@@QBE_WH@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@_W@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@XZ
?CreateTXData@SSOData@Util@@YAHPAPAUITXSSOData@@@Z
?CreateTXBuffer@SSOData@Util@@YAHPAPAUITXSSOBuffer@@@Z
??BCTXStringW@@QBEPB_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
?CopyTXDataField@SSOData@Util@@YAHPAUITXSSODataRead@@PAUITXSSOData@@PB_W2@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?Random@Sys@Util@@YAHXZ
?GetLCID@NLS@@YAKXZ
?GetTimeOffsetUTC@NLS@@YAJXZ
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
??0CTXStringW@@QAE@PB_WH@Z
?CancelResolve@HostResolve@Util@@YAJK@Z
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
??8CTXBSTR@@QBE_NPA_W@Z
?CreateTXArray@SSOData@Util@@YAHPAPAUITXSSOArray@@@Z
?Length@CTXBSTR@@QBEIXZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?InitDownloadTempDirectory@CTXHttpDownload@@SAXPB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??0CTXStringW@@QAE@PB_W@Z
??0CCmdCodecBase@@QAE@XZ
wcslcat
??YCTXStringW@@QAEAAV0@ABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?GetIEProxyUserName@Network@Util@@YAHAAVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetSSOTempDir@Dir@Util@@YA?AVCTXStringW@@XZ
?InitNetwork@Network@Util@@YAHXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?SetConfigFile@TXI18N@@YAHPB_W0@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetRootDir@Dir@Util@@YA?AVCTXStringW@@XZ
?IsEmpty@CTXBSTR@@QAEHXZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXCommPack@@QAE@XZ
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??1CTXCommPack@@UAE@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
??0CTXStringW@@QAE@PA_W@Z
?GetProcessName@SystemHelp@Util@@YA?AVCTXStringW@@K@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??1CFmtString@@QAE@XZ
??8CTXBSTR@@QBE_NABV0@@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?GetUserDefaultLCID@NLS@@YAKXZ
?SetLCID@NLS@@YAHK@Z
?NotifyIdle@TXTimer@@YAXXZ
?SetUserLCID@TXI18N@@YAXK@Z
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
LCMapStringA
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
Sleep
IsValidCodePage
GetOEMCP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
LCMapStringW
HeapDestroy
VirtualAlloc
VirtualFree
GetProcessHeap
GetCommandLineA
CreateThread
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
GetLocaleInfoW
DeleteCriticalSection
GetLastError
RaiseException
lstrcmpiW
GetModuleFileNameW
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
lstrlenW
LocalAlloc
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
CreateDirectoryW
GetCommandLineW
TerminateThread
VirtualProtect
GlobalAlloc
GlobalFree
GetSystemDirectoryW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetFileAttributesW
GetVersionExW
LocalFree
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CloseHandle
GetThreadLocale
SetThreadLocale
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
RegisterClassExW
PostMessageW
SendMessageW
GetDesktopWindow
SendMessageTimeoutW
DestroyWindow
GetWindowLongW
DefWindowProcW
SetWindowLongW
ShowWindow
CreateWindowExW
GetClassInfoExW
UnregisterClassA
GetWindowThreadProcessId
CharNextW
IsWindow
GetStockObject
SetSecurityDescriptorSacl
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SHGetSpecialFolderPathW
StringFromGUID2
CoCreateInstance
CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
VariantClear
VariantInit
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE