Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a330d7a8f0b1c8bef48936cdf7dd0998d6d2bb2e193d1fb5afe0b99c46f9f410.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a330d7a8f0b1c8bef48936cdf7dd0998d6d2bb2e193d1fb5afe0b99c46f9f410.dll
Resource
win10v2004-20220901-en
Target
a330d7a8f0b1c8bef48936cdf7dd0998d6d2bb2e193d1fb5afe0b99c46f9f410
Size
2.6MB
MD5
dcabdf555a1d1d4fe7f674c8de1f0988
SHA1
93e474f0c790e8c917bb75391b28dcb5e843ec26
SHA256
a330d7a8f0b1c8bef48936cdf7dd0998d6d2bb2e193d1fb5afe0b99c46f9f410
SHA512
a48d7889ff18901ed14bd6742a7c150ca36ca9df9a815dd7909bb6c8e0d2607dec0fbdf7a61e964f6e9f9e1660fce57e40ec3ac19c1e1438e818232e87fb38ae
SSDEEP
49152:dSKCtBkGcNYxyu3pFm37SPBCTknr3fy0CtcIkpLUm2:dSKCfNcgFE7qCArPyH
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WSACleanup
recv
send
inet_addr
WSAStringToAddressA
closesocket
WSAGetLastError
WSASetLastError
WSAEnumProtocolsA
WSAAddressToStringW
?Lock@CTXCriticalSection@@QAEHXZ
?Unlock@CTXCriticalSection@@QAEHXZ
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Insert@CTXStringW@@QAEHHPB_W@Z
?FirstChild@TiXmlNode@@QAEPAV1@PBD@Z
?NextSibling@TiXmlNode@@QAEPAV1@PBD@Z
?GetText@TiXmlElement@@QBEPBDXZ
?Trim@CTXStringW@@QAEAAV1@PB_W@Z
??0TiXmlDocument@@QAE@XZ
??1TiXmlDocument@@UAE@XZ
?Parse@TiXmlDocument@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?ErrorDesc@TiXmlDocument@@QBEPBDXZ
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?GetLCID@NLS@@YAKXZ
??0CTXSpinLock@Util@@QAE@XZ
??1CTXSpinLock@Util@@QAE@XZ
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?GetBindIPFromTargetIP@Network@Util@@YAKKPAK@Z
?GetMacGuid@CComputerIDGenerator@@SAHPAEAAVCTXStringW@@@Z
??8CTXBSTR@@QBE_NPB_W@Z
??1CTXCriticalSection@@UAE@XZ
??0CTXCriticalSection@@QAE@XZ
?GetLCID@TXI18N@@YAKXZ
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?IsCSSubSendData@Misc@Util@@YAHPAUITXData@@@Z
?GetClientType@ClientType@ProductConfig@Util@@YAJPAK@Z
?GetHttpAuthType@NetworkEnv@Util@@YAJPAJ@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??9@YA_NABVCTXStringW@@0@Z
??0CTXBSTR@@QAE@HPB_W@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??YCTXStringW@@QAEAAV0@_W@Z
?GetAt@CTXStringW@@QBE_WH@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?Attach@CTXBSTR@@QAEXPA_W@Z
?IsFileExist@FS@@YAHPB_W@Z
?GetBinDir@Dir@Util@@YA?AVCTXStringW@@XZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?CancelResolve@HostResolve@Util@@YAJK@Z
?IsEmpty@CTXStringA@@QBE_NXZ
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
??0CTXStringW@@QAE@PB_WH@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
wcslcat
?MySHGetSpecialFolderPath@Dir@Util@@YAHPAUHWND__@@PA_WHH@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?Mid@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
?GetDecodeNumberSigned@CCmdCodecBase@@IAEHPB_W@Z
?StringToIPv6@Network@Util@@YAHPB_WAAUin6_addr@@@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?AddStrWLenWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z
?Random@Sys@Util@@YAHXZ
?GetSpecialFolderPath@Sys@Util@@YAHHAAVCTXBSTR@@@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?GetUInt64@CTXCommPack@@QAEHAA_KHH@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??M@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??1CFmtString@@QAE@XZ
??0CFmtString@@QAE@XZ
??8@YA_NPA_WABVCTXBSTR@@@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?GetString@CTXStringA@@QBEPBDXZ
?InitNetwork@Network@Util@@YAHXZ
?InitDownloadTempDirectory@CTXHttpDownload@@SAXPB_W@Z
?GetSSOTempDir@Dir@Util@@YA?AVCTXStringW@@XZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?SetConfigFile@TXI18N@@YAHPB_W0@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GetRootDir@Dir@Util@@YA?AVCTXStringW@@XZ
?SetUserLCID@TXI18N@@YAXK@Z
?NotifyIdle@TXTimer@@YAXXZ
?GetUserDefaultLCID@NLS@@YAKXZ
?SetLCID@NLS@@YAHK@Z
?FlushLog@TXLog@@YAXXZ
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
?CopyTXDataField@SSOData@Util@@YAHPAUITXSSODataRead@@PAUITXSSOData@@PB_W2@Z
?IsNetConnectionOK2@Network@Util@@YAHPAHPAEPAKPAPA_W@Z
?CreateTXBuffer@SSOData@Util@@YAHPAPAUITXSSOBuffer@@@Z
?CreateTXData@SSOData@Util@@YAHPAPAUITXSSOData@@@Z
?GetProcessName@SystemHelp@Util@@YA?AVCTXStringW@@K@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?Preallocate@CTXStringW@@QAEXH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?GetTimeOffsetUTC@NLS@@YAJXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?SetBufferIn@CTXCommPack@@QAEXPBEIH@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?Empty@CTXBSTR@@QAEXXZ
??1CCmdCodecBase@@UAE@XZ
??0CCmdCodecBase@@QAE@XZ
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddByte@CTXCommPack@@QAEHE@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddWord@CTXCommPack@@QAEHGH@Z
??1CTXCommPack@@UAE@XZ
??0CTXCommPack@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?JumpBuf@CTXCommPack@@QAEHH@Z
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?Format@CTXStringW@@QAAXPB_WZZ
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??0CTXStringW@@QAE@PB_W@Z
?DataReport@HttpDataReport@Util@@YAXKKKPA_W0@Z
?CopyBufferOut@CTXCommPack@@QBEHAAVCTXBuffer@@@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?GetBuffer@CTXStringA@@QAEPADXZ
?GetLength@CTXStringA@@QBEHXZ
?GetBuffer@CTXStringW@@QAEPA_WXZ
?AddBufLenDWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?DataReport@HttpDataReport@Util@@YAXKK@Z
??0CTXStringW@@QAE@PA_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??BCTXStringA@@QBEPBDXZ
??BCTXStringW@@QBEPB_WXZ
?Lock@CTXSpinLock@Util@@QAEXXZ
?UnLock@CTXSpinLock@Util@@QAEXXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@PBD@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?LoadXmlByContent@FS@Util@@YAHPA_WPAPAUIXMLDOMDocument@@@Z
??ACTXStringW@@QBE_WH@Z
?TrimRight@CTXStringW@@QAEAAV1@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?GetIEProxyUserName@Network@Util@@YAHAAVCTXStringW@@0@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??8CTXBSTR@@QBE_NABV0@@Z
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
?Length@CTXBSTR@@QBEIXZ
??8CTXBSTR@@QBE_NPA_W@Z
?CreateTXArray@SSOData@Util@@YAHPAPAUITXSSOArray@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?Empty@CTXStringW@@QAEXXZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetIpAddrTable
GetAdaptersAddresses
GetIpForwardTable
GetModuleBaseNameW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
SetFilePointerEx
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
FindResourceExW
LockResource
GetConsoleCP
GetStringTypeW
GetCurrentProcessId
GetModuleHandleW
GetLastError
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
CreateEventW
CreateThread
CloseHandle
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
GetCurrentDirectoryW
GetFullPathNameW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
GetACP
InterlockedFlushSList
WaitForSingleObject
FindNextFileW
FindFirstFileW
FindClose
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
WideCharToMultiByte
ConvertFiberToThread
TerminateProcess
DeleteFiber
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
WriteFile
GetFileType
GetEnvironmentVariableW
GetStdHandle
GetModuleHandleExW
OpenProcess
ReadFile
GetDiskFreeSpaceExW
GetVolumeInformationW
GetSystemDirectoryW
GetCommandLineW
GetComputerNameW
CreateDirectoryW
GlobalFree
GetFileAttributesW
VirtualAlloc
VirtualFree
VirtualProtect
QueueUserWorkItem
VirtualQuery
UnmapViewOfFile
VirtualLock
SetProcessWorkingSetSize
GetCurrentProcess
GetProcessWorkingSetSize
MapViewOfFile
CreateFileMappingW
GetSystemInfo
CreateFileW
GetProcessHeap
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DecodePointer
SetThreadLocale
GetThreadLocale
OutputDebugStringA
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
RaiseException
lstrcmpiW
GlobalAlloc
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryW
LocalFree
GetVersionExW
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
SystemTimeToFileTime
GetSystemTime
ReleaseMutex
OpenMutexW
CreateMutexW
Sleep
SetEvent
GetProcessWindowStation
ShowWindow
GetDesktopWindow
CharNextW
SendMessageTimeoutW
EnumWindows
GetWindowThreadProcessId
GetWindowTextW
GetClassNameW
SendMessageW
GetUserObjectInformationW
TranslateMessage
GetMessageW
PostThreadMessageW
DefWindowProcW
GetWindowLongW
PostMessageW
DestroyWindow
IsWindow
SetWindowLongW
CreateWindowExW
RegisterClassExW
GetClassInfoExW
DispatchMessageW
MessageBoxW
GetStockObject
CryptAcquireContextW
DeregisterEventSource
SetSecurityDescriptorSacl
ReportEventW
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
GetSecurityDescriptorSacl
CryptGenRandom
CryptReleaseContext
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegisterEventSourceW
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoCreateGuid
StringFromGUID2
CoTaskMemRealloc
VarUI4FromStr
UnRegisterTypeLi
SysAllocString
LoadTypeLi
SysFreeString
RegisterTypeLi
SysStringLen
LoadRegTypeLi
VariantInit
VariantClear
PathRemoveExtensionA
PathStripPathA
PathRemoveFileSpecW
PathFileExistsW
PathCombineW
InternetCrackUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetWlanBSSIDMd5
GetWlanSSIDAndBSSID
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ