Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
1359fe2701275b9cbe69a056cc23cc4c.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1359fe2701275b9cbe69a056cc23cc4c.dll
Resource
win10v2004-20231222-en
Target
1359fe2701275b9cbe69a056cc23cc4c
Size
837KB
MD5
1359fe2701275b9cbe69a056cc23cc4c
SHA1
aae65377458b533f53d1aa38e9614352b00a5a4f
SHA256
30a7cfe571c6738c080f5d8497feb230c8462be7919bac26c300fa815c17e88e
SHA512
b4b75493a7601a8438104adb7557f9f688d5a42e41e31bf7a06f2c8d3f48754044d6287dd114bfc0af17b809c4189a449d0162bb6232dd3eb1be7b60e07cf6c8
SSDEEP
12288:36w8vxDbovwwiy2Z610hOtlx3nactdsyzU0XyVoo6hGzOIEv:qw8JDbVyAAPUgy4GzO3v
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??0CFmtString@@QAE@XZ
ord35
??0CTXBSTR@@QAE@ABV0@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetLoginServerTime@Time@Util@@YAKXZ
??H@YA?AVCTXStringW@@ABV0@0@Z
ord36
??8CTXBSTR@@QBE_NPA_W@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@ABV0@@Z
ord34
?Mid@CTXStringW@@QBE?AV1@H@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??0CTXStringW@@QAE@PA_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?GetAt@CTXStringW@@QBE_WH@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeArrayTXDataString@CCmdCodecBase@@IAEXPB_WI@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeString@CCmdCodecBase@@IAEXPB_WI@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayTXDataString@CCmdCodecBase@@IAEXPB_WI@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
ord25
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??1CTXStringA@@QAE@XZ
?Delete@CTXStringW@@QAEHHH@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Length@CTXBSTR@@QBEIXZ
?AllocSysString@CTXStringW@@QBEPA_WXZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
ord28
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
?Find@CTXStringW@@QBEH_WH@Z
?Empty@CTXStringW@@QAEXXZ
??9@YA_NABVCTXStringW@@PB_W@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?PropertyLong@CFmtString@@QAEHPB_WJ0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?GBKToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
??BCTXStringA@@QBEPBDXZ
?MakeSpellCode@Py@Util@@YA?AVCTXStringA@@ABV3@H@Z
?UnicodeToGBK@Convert@Util@@YA_NAAVCTXStringA@@PB_WH@Z
??0CTXStringA@@QAE@XZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??9CTXBSTR@@QBE_NABV0@@Z
ord33
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?Insert@CTXStringW@@QAEHHPB_W@Z
?Empty@CTXBSTR@@QAEXXZ
?XmlContentPrefix@Convert@Util@@YAHPA_WPAPA_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??1CFmtString@@QAE@XZ
??8CTXBSTR@@QBE_NABV0@@Z
??8CTXBSTR@@QBE_NPB_W@Z
ord26
??8@YA_NABVCTXStringW@@0@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXStringW@@QAE@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
??0CGFAnchor@@QAE@XZ
?AddAnchor@CGFAnchor@@QAEXEEVCRect@@VCPoint@@@Z
?GetBOOL@Metadata@Util@@YAJPAUITXData@@PA_WPAH@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?AdviseWebBrowser@IEEvent@Util@@YAHPAUIWebBrowser2@@PAUITXWebBrowserEvents@@PAPAUIUnknown@@AAK@Z
?StopLightInLightOut@GF@Util@@YAJPAUIGFFrame@@@Z
?LightInLightOut@GF@Util@@YAJPAUIGFFrame@@EEKDKHKKPAUIGFAnimationEvent@@@Z
?GetAnchorResult@CGFAnchor@@QAE?AVCRect@@PAVVCalcSizeSupporter@@PAUtagSIZE@@@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z
?IsNewFlagValid@Contact@Util@@YAHKK@Z
?CheckUinValid@Misc@Util@@YAHPA_W@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetMinorVer@Version@@YAEXZ
?GetLangFmt@URL@Util@@YAXAAVCFmtString@@@Z
?AdjustUrl@URL@Util@@YA?AVCTXStringW@@ABV3@W4URLMODIFYLEVEL@12@0@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetAccountValue@Account@Util@@YA?AVCTXStringW@@K@Z
?IsVASFlagValidEx@Contact@Util@@YAKKEI@Z
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z
?IsServerControlBitOn@Misc@Util@@YAHK@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?IsOnline@Contact@Util@@YAHK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?IsFlagValid@Contact@Util@@YAHKK@Z
?SaveMsg@Msg@Util@@YAHPB_WKKKPAUITXMsgPack@@PAUITXData@@@Z
?SaveMsg@Msg@Util@@YAHPB_W000KKPAUITXMsgPack@@PAUITXData@@@Z
?GetMsgAbstract@Msg@Util@@YA?AVCTXStringW@@PAUITXMsgPack@@@Z
?PreTranslateMsgImage@Msg@Util@@YAHPAUITXMsgImage@@@Z
?TransformMsg@Msg@Util@@YAXPAUITXMsgPack@@PAPAU3@K@Z
?IsBindMobile@Contact@Util@@YAHK@Z
?GetPublicGender@Contact@Util@@YAEK@Z
?IsBuddy@Contact@Util@@YAHK@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?GetMajorVer@Version@@YAEXZ
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?IsEnableYaHei@Misc@Util@@YAHXZ
?GetTipIconFile@Misc@Util@@YA?AVCTXStringW@@W4IconIndex@@@Z
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?GetMobileUserType@Contact@Util@@YA?AW4MOBILE_USER_TYPE@12@K@Z
?OpenUrlWithWnd@URL@Util@@YAPAUHWND__@@ABVCTXStringW@@W4URLMODIFYLEVEL@12@0HHPB_WPAPAUIGFStandardWin@@HV4@HPAUIIEHost@@@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
FreeLibrary
GetProcAddress
lstrcmpW
GlobalUnlock
GlobalLock
GlobalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetProcessHeap
CharNextW
CopyRect
SystemParametersInfoW
GetCursorPos
GetActiveWindow
SetFocus
UnregisterClassA
GetKeyState
SetRect
GetForegroundWindow
IsZoomed
ShowWindow
SetForegroundWindow
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
SHGetFileInfoW
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoCreateGuid
StgCreateDocfile
CreateStreamOnHGlobal
OleDuplicateData
ReleaseStgMedium
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
SysAllocString
ord15
ord18
ord22
ord64
ord23
ord61
ord32
ord58
ord30
ord31
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
_initterm_e
_amsg_exit
_adjust_fdiv
_initterm
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_encoded_null
_malloc_crt
memcpy
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
__CppXcptFilter
_except_handler4_common
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
free
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
_recalloc
memcpy_s
malloc
wcscpy_s
wcsncpy_s
memmove_s
_purecall
memset
_time64
iswalpha
_wtoi64
_wtoi
_decode_pointer
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ