Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
20a63e678a462e052d444d2891d537b0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20a63e678a462e052d444d2891d537b0.exe
Resource
win10v2004-20240508-en
Target
20a63e678a462e052d444d2891d537b0.bin
Size
4.5MB
MD5
20a63e678a462e052d444d2891d537b0
SHA1
c5ae4efa1a382a3822f1a88126693eef74e45349
SHA256
927afa2f1316f34657d16697a3e0aa1fb810057c8c44dbb203d84d44cded88a3
SHA512
cdec33754474be82089cd38a7f4b00ba5b016a7fe83ebbc933ce25a2f9fb5fd19b76516c21f76e7499e72376d4b4f208dc73ffe690aac9298537c4e52723fd14
SSDEEP
98304:U3kSQ6zpUlfQDpyRGpaCeC07TKSjPy0uOouZ51sShUUnAZk3PRUR6K:dWGljGOHXuOou/99AKfnK
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
e:\build\360mobilemgr\branches\360MobileInfo_for_1621\bin\mobileMgr\Release\360MobileMgr.pdb
CreateURLMoniker
URLDownloadToFileW
ObtainUserAgentString
RegisterBindStatusCallback
GetTempFileNameW
CreateWaitableTimerW
SetWaitableTimer
SetEndOfFile
SetFileTime
TlsAlloc
TlsFree
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
CreateProcessA
ReleaseSemaphore
CreateSemaphoreA
CreateEventA
SetHandleInformation
GetThreadPriority
GetCurrentThread
WritePrivateProfileStringW
LoadLibraryExW
lstrcmpiW
LocalFree
OpenProcess
DeleteCriticalSection
InitializeCriticalSection
CreateFiber
lstrlenA
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
FindFirstFileW
FindNextFileW
FindClose
GetPrivateProfileIntW
TerminateProcess
GetTempPathW
DeleteFileW
MultiByteToWideChar
GetLocalTime
FreeLibrary
LoadLibraryW
ConvertThreadToFiber
QueueUserWorkItem
CreateDirectoryW
SetEvent
InterlockedDecrement
ResetEvent
CancelWaitableTimer
WaitForMultipleObjects
TlsSetValue
IsBadWritePtr
OutputDebugStringW
RemoveDirectoryW
GetLongPathNameW
GetShortPathNameW
SetVolumeLabelW
SetEnvironmentVariableA
InterlockedIncrement
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
GetStringTypeA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
SetCurrentDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetStartupInfoA
GetStdHandle
SetHandleCount
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetPrivateProfileSectionNamesW
CompareStringA
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
MoveFileA
RtlUnwind
GetDateFormatA
GetTimeFormatA
FindFirstFileA
GetDriveTypeA
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
GetFileType
LocalFileTimeToFileTime
SetFilePointerEx
SetEnvironmentVariableW
OpenThread
FormatMessageW
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
HeapDestroy
GetLocaleInfoA
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
GetDiskFreeSpaceA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
FlushFileBuffers
GetFileAttributesA
FormatMessageA
GetSystemTimeAsFileTime
LockFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
GetFullPathNameA
GetProcessHeap
HeapFree
HeapAlloc
CreateFileA
ConnectNamedPipe
CreateNamedPipeW
CancelIo
GetProcessId
Thread32Next
Thread32First
SuspendThread
GetFileSizeEx
ReleaseMutex
GetPrivateProfileSectionW
GetStartupInfoW
CreatePipe
SetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileAttributesExW
GetEnvironmentVariableW
SearchPathW
GetSystemInfo
CopyFileW
GetSystemTime
MoveFileW
GetTimeZoneInformation
VirtualFree
lstrcpyW
GetFullPathNameW
GlobalSize
TerminateThread
GetVersion
VirtualAlloc
IsBadReadPtr
ExitProcess
SetUnhandledExceptionFilter
GetDriveTypeW
GetLogicalDriveStringsW
MoveFileExW
SetFileAttributesW
GetFileAttributesW
GetDiskFreeSpaceExW
WaitForSingleObject
CreateThread
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
CreateEventW
DuplicateHandle
SystemTimeToFileTime
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateMutexW
GetPrivateProfileStringW
WriteFile
lstrcpynA
SetFilePointer
ReadFile
GetFileSize
GetModuleHandleA
lstrcmpiA
VirtualProtect
VirtualQuery
lstrcmpW
MulDiv
Sleep
GlobalAlloc
GlobalReAlloc
GlobalLock
SetLastError
SwitchToFiber
GetTickCount
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetLastError
GlobalUnlock
GlobalFree
GetVersionExW
FreeResource
RaiseException
FlushInstructionCache
GetCurrentProcess
CreateProcessW
CreateFileW
DeviceIoControl
CloseHandle
GetCurrentProcessId
GetModuleFileNameW
FindResourceExW
TlsGetValue
GetPrivateProfileStringA
GetExitCodeProcess
GetWindowsDirectoryW
GetSystemDirectoryW
FindNextFileA
ResumeThread
CompareStringW
SetThreadPriority
FindResourceW
LoadResource
LockResource
SizeofResource
lstrlenW
CreateDirectoryA
SetFileAttributesA
WriteConsoleW
LocalAlloc
GetOverlappedResult
BeginPaint
ScreenToClient
SetTimer
DrawIconEx
SetWindowRgn
ReleaseCapture
SetCapture
GetCapture
UpdateWindow
InvalidateRect
OffsetRect
EndPaint
GetCursorPos
WindowFromPoint
SendMessageW
IsZoomed
ShowWindow
SetWindowTextW
LoadImageW
AdjustWindowRectEx
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
DestroyWindow
DefWindowProcW
SetWindowPos
IntersectRect
DrawTextW
SetCursor
CallWindowProcW
FillRect
GetClassLongW
UnregisterClassA
CreateIconIndirect
GetLastInputInfo
CreateDesktopW
GetThreadDesktop
GetUserObjectInformationW
CloseDesktop
OpenDesktopW
GetGUIThreadInfo
SendMessageTimeoutW
DestroyIcon
GetIconInfo
PostThreadMessageW
UnregisterDeviceNotification
IsWindowEnabled
ExitWindowsEx
GetWindowRgn
GetDlgCtrlID
SetFocus
GetAsyncKeyState
GetSystemMetrics
RedrawWindow
GetDlgItem
SetRect
LoadCursorW
PtInRect
DialogBoxIndirectParamW
FindWindowW
RegisterClassExW
MoveWindow
ClientToScreen
CreateWindowExW
GetClassInfoExW
IsChild
RegisterWindowMessageW
SystemParametersInfoW
GetActiveWindow
SetLayeredWindowAttributes
IsWindowVisible
SetForegroundWindow
GetWindowPlacement
RegisterDeviceNotificationW
IsIconic
CreateDialogIndirectParamW
TrackPopupMenu
GetDC
ReleaseDC
EndDialog
PostMessageW
SetWindowLongW
IsWindow
KillTimer
PostQuitMessage
ShowScrollBar
TrackPopupMenuEx
GetMenuState
GetKeyState
GetMenuItemCount
DrawEdge
GetMessagePos
RegisterClipboardFormatW
GetClipboardData
IsClipboardFormatAvailable
SetMenuItemBitmaps
SetParent
wsprintfW
FindWindowExW
SetRectEmpty
GetDoubleClickTime
EnableMenuItem
CheckMenuItem
CopyRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetScrollPos
ScrollWindow
GetScrollInfo
GetScrollRange
SetScrollInfo
EnumThreadWindows
InflateRect
GetWindowDC
MsgWaitForMultipleObjects
SendNotifyMessageW
LoadIconW
GetWindowTextLengthW
GetWindowTextW
GetFocus
GetClassNameW
GetSysColor
CreateAcceleratorTableW
InvalidateRgn
DestroyAcceleratorTable
UpdateLayeredWindow
TrackMouseEvent
EqualRect
SetActiveWindow
EnableWindow
MessageBoxW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetForegroundWindow
GetWindowInfo
GetShellWindow
GetWindowThreadProcessId
GetAncestor
CharNextW
GetDesktopWindow
MonitorFromPoint
DestroyMenu
SetMenuDefaultItem
GetSubMenu
AppendMenuW
LoadMenuW
CreatePopupMenu
CombineRgn
SelectClipRgn
CreatePatternBrush
CreateBitmap
RectVisible
SetBitmapBits
GetBitmapBits
PatBlt
SetWorldTransform
SetGraphicsMode
CreateFontW
GetDeviceCaps
SetBrushOrgEx
CreateDIBSection
CreateSolidBrush
ExtTextOutW
SetBkColor
GetStockObject
CreateFontIndirectW
CreatePen
LineTo
MoveToEx
IntersectClipRect
CreateRoundRectRgn
CreateRectRgn
SetStretchBltMode
StretchBlt
CreateCompatibleBitmap
BitBlt
OffsetViewportOrgEx
SetViewportOrgEx
ExcludeClipRect
GetObjectW
SetBkMode
GetTextColor
GetClipBox
TextOutW
SetTextColor
GetTextExtentPoint32W
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
PtInRegion
SetWindowOrgEx
DPtoLP
LPtoDP
GetDIBits
GetDIBColorTable
GetSaveFileNameW
GetOpenFileNameW
OpenProcessToken
RegQueryValueW
RegEnumValueW
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptImportKey
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetNamedSecurityInfoW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
SetSecurityInfo
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
GetTokenInformation
RegSetValueW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatusEx
StartServiceW
ControlService
QueryServiceConfigW
ChangeServiceConfigW
RegOpenKeyExA
RegQueryValueExA
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegSetValueExA
CryptSetKeyParam
SHChangeNotify
SHGetPathFromIDListW
DragQueryFileW
ord165
ExtractIconW
SHBrowseForFolderW
ShellExecuteExW
Shell_NotifyIconW
DragFinish
SHGetFileInfoW
SHCreateDirectoryExW
SHFileOperationW
SHGetSpecialFolderPathW
ShellExecuteW
DragAcceptFiles
DoDragDrop
OleSetClipboard
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
CoInitialize
OleInitialize
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
OleRun
CoCreateGuid
CreateBindCtx
CoTaskMemAlloc
CoCreateInstance
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
OleUninitialize
CoUninitialize
GetHGlobalFromStream
SysAllocStringByteLen
VariantTimeToSystemTime
VariantChangeType
SafeArrayGetVartype
SafeArrayDestroy
GetErrorInfo
VariantCopy
SystemTimeToVariantTime
SysStringByteLen
SysFreeString
VarUI4FromStr
SysAllocString
OleCreateFontIndirect
SysStringLen
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
SysAllocStringLen
DispCallFunc
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SHDeleteValueW
SHDeleteKeyW
StrStrNIW
StrStrW
PathFindExtensionW
StrRStrIW
PathRemoveFileSpecA
PathCombineW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathRemoveBackslashW
StrStrIW
StrCmpIW
SHSetValueW
StrStrIA
StrCmpNIW
StrChrW
PathAddBackslashW
SHAutoComplete
SHGetValueW
PathAppendW
StrCpyW
StrCmpW
PathBuildRootW
PathIsRootW
PathGetDriveNumberW
ImageList_Draw
_TrackMouseEvent
ImageList_GetIcon
ImageList_Add
InitCommonControlsEx
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
GradientFill
AlphaBlend
GdipLoadImageFromFile
GdipDrawImageRectRectI
GdipSetSmoothingMode
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipDisposeImage
GdipCloneImage
GdipFree
GdipCreateBitmapFromHBITMAP
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawRectangleI
GdipDeletePen
GdipCreatePen1
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromStream
GdipCreateBitmapFromResource
GdipCreateBitmapFromFile
GdipAlloc
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
CM_Get_Parent
CM_Get_Sibling
CM_Get_Device_IDW
CM_Get_Child
CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyW
CM_Reenumerate_DevNode
CM_Locate_DevNodeW
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
MakeSureDirectoryPathExists
GetModuleFileNameExA
EnumProcesses
EnumProcessModules
GetModuleFileNameExW
InternetGetConnectedState
InternetCrackUrlW
InternetQueryOptionW
InternetGetLastResponseInfoW
FtpCommandW
InternetWriteFile
HttpEndRequestW
FtpOpenFileW
InternetReadFileExA
InternetReadFile
InternetSetStatusCallbackW
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetSetOptionA
InternetOpenA
HttpSendRequestA
HttpAddRequestHeadersA
InternetSetCookieA
InternetAttemptConnect
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
DeleteUrlCacheEntryW
FtpGetFileSize
HttpQueryInfoW
HttpSendRequestExW
HttpOpenRequestW
InternetSetOptionW
GetAdaptersInfo
WSAStartup
WSACleanup
WSAAsyncSelect
socket
ioctlsocket
setsockopt
htons
connect
WSAGetLastError
getsockopt
send
recv
closesocket
inet_addr
listen
gethostbyname
htonl
ntohl
ntohs
WSACreateEvent
bind
shutdown
WSAEventSelect
WSAEnumNetworkEvents
accept
??0AdbEndpointObject@@QAE@ABV0@@Z
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??0AdbIOCompletion@@QAE@ABV0@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??0AdbInterfaceObject@@QAE@ABV0@@Z
??0AdbInterfaceObject@@QAE@PB_W@Z
??0AdbObjectHandle@@QAE@ABV0@@Z
??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z
??1AdbEndpointObject@@MAE@XZ
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
??1AdbObjectHandle@@MAE@XZ
??4AdbEndpointObject@@QAEAAV0@ABV0@@Z
??4AdbIOCompletion@@QAEAAV0@ABV0@@Z
??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z
??4AdbObjectHandle@@QAEAAV0@ABV0@@Z
??_7AdbEndpointObject@@6B@
??_7AdbIOCompletion@@6B@
??_7AdbInterfaceObject@@6B@
??_7AdbObjectHandle@@6B@
?AddRef@AdbObjectHandle@@UAEJXZ
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ
?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?IsOpened@AdbObjectHandle@@QBE_NXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?Lookup@AdbObjectHandle@@SAPAV1@PAX@Z
?Release@AdbObjectHandle@@UAEJXZ
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?Type@AdbEndpointObject@@SA?AW4AdbObjectType@@XZ
?Type@AdbIOCompletion@@SA?AW4AdbObjectType@@XZ
?Type@AdbInterfaceObject@@SA?AW4AdbObjectType@@XZ
?adb_handle@AdbObjectHandle@@QBEPAXXZ
?endpoint_id@AdbEndpointObject@@QBEEXZ
?endpoint_index@AdbEndpointObject@@QBEEXZ
?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ
?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ
?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ
?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ
?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ
?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ
?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ
AdbCloseHandle
AdbCreateInterface
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetDefaultBulkReadEndpointInformation
AdbGetDefaultBulkWriteEndpointInformation
AdbGetEndpointInformation
AdbGetEndpointInterface
AdbGetInterfaceName
AdbGetOvelappedIoResult
AdbGetSerialNumber
AdbGetUsbConfigurationDescriptor
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbHasOvelappedIoComplated
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbOpenEndpoint
AdbQueryInformationEndpoint
AdbReadEndpointAsync
AdbReadEndpointSync
AdbResetInterfaceEnum
AdbWriteEndpointAsync
AdbWriteEndpointSync
CreateSrvWnd
GetAdbInterfaceNum
GetPhoneUid
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ