Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a1bc2b93e236345a6b7408e01a9ce19e1aaf0cd0711ce7b0468891296e94cd17.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a1bc2b93e236345a6b7408e01a9ce19e1aaf0cd0711ce7b0468891296e94cd17.dll
Resource
win10v2004-20240508-en
Target
a1bc2b93e236345a6b7408e01a9ce19e1aaf0cd0711ce7b0468891296e94cd17
Size
235KB
MD5
56e99a7f18f863e6a16082baa0c463c7
SHA1
9f1969a0536bc1d94b60f9ae95c99a75360f975c
SHA256
a1bc2b93e236345a6b7408e01a9ce19e1aaf0cd0711ce7b0468891296e94cd17
SHA512
e97dd7d2fbe88347a6c82f7b2a3da71be431b5740ceaadb345ec968c6adce542ef3c55f61d92a913ee18eb1fedb64a5e08a26fb6a6bd0d2805df15b383bc0392
SSDEEP
6144:WmmUoI4F5S9F04uRJm52YK+/TZru1FjZ4:WmmUoIc5SQ4uRJm52iu1FjZ4
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\rc_v12_personal_20231228_branch\Build\Release\WPSOffice\office6\addons\kaudio\kaudio.pdb
?beginGroup@QSettings@kso_qt@@QAEXABVQString@2@@Z
?value@QSettings@kso_qt@@QBE?AVQVariant@2@ABVQString@2@ABV32@@Z
??Mkso_qt@@YA_NABVQString@0@0@Z
?staticMetaObject@QIODevice@kso_qt@@2UQMetaObject@2@B
?completeSuffix@QFileInfo@kso_qt@@QBE?AVQString@2@XZ
?exists@QFileInfo@kso_qt@@QBE_NXZ
??1QFileInfo@kso_qt@@QAE@XZ
??0QFileInfo@kso_qt@@QAE@ABVQString@1@@Z
?size@QFile@kso_qt@@UBE_JXZ
?open@QFile@kso_qt@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@kso_qt@@@2@@Z
?remove@QFile@kso_qt@@QAE_NXZ
?exists@QFile@kso_qt@@QBE_NXZ
??1QFile@kso_qt@@UAE@XZ
??0QFile@kso_qt@@QAE@ABVQString@1@@Z
?seek@QFileDevice@kso_qt@@UAE_N_J@Z
?close@QFileDevice@kso_qt@@UAEXXZ
?toBool@QVariant@kso_qt@@QBE_NXZ
??0QVariant@kso_qt@@QAE@_N@Z
??1QVariant@kso_qt@@QAE@XZ
?erase@QListData@kso_qt@@QAEPAPAXPAPAX@Z
?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z
?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??4QString@kso_qt@@QAEAAV01@PBD@Z
?number@QString@kso_qt@@SA?AV12@JH@Z
?toInt@QString@kso_qt@@QBEHPA_NH@Z
?compare@QString@kso_qt@@QBEHABV12@W4CaseSensitivity@Qt@2@@Z
?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z
?dynamicMetaObject@QObjectData@kso_qt@@QBEPAUQMetaObject@2@XZ
?qt_metacast@QObject@kso_qt@@UAEPAXPBD@Z
?qt_metacall@QObject@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?qt_metacast@QIODevice@kso_qt@@UAEPAXPBD@Z
?qt_metacall@QIODevice@kso_qt@@UAEHW4Call@QMetaObject@2@HPAPAX@Z
?normalizedType@QMetaObject@kso_qt@@SA?AVQByteArray@2@PBD@Z
??0QByteArray@kso_qt@@QAE@XZ
??0QByteArray@kso_qt@@QAE@ABV01@@Z
??1QByteArray@kso_qt@@QAE@XZ
??0QString@kso_qt@@QAE@XZ
??0QString@kso_qt@@QAE@ABV01@@Z
?fromLocal8Bit@QString@kso_qt@@SA?AV12@PBDH@Z
?toLower@QString@kso_qt@@QHAE?AV12@XZ
?insert@QByteArray@kso_qt@@QAEAAV12@HHD@Z
?append@QByteArray@kso_qt@@QAEAAV12@ABV12@@Z
?data@QByteArray@kso_qt@@QAEPADXZ
??0QByteArray@kso_qt@@QAE@$$QAV01@@Z
??0QByteArray@kso_qt@@QAE@HD@Z
??0QByteArray@kso_qt@@QAE@PBDH@Z
?waitForReadyRead@QIODevice@kso_qt@@UAE_NH@Z
?waitForBytesWritten@QIODevice@kso_qt@@UAE_NH@Z
?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z
?size@QIODevice@kso_qt@@UBE_JXZ
?seek@QIODevice@kso_qt@@UAE_N_J@Z
?reset@QIODevice@kso_qt@@UAE_NXZ
?readLineData@QIODevice@kso_qt@@MAE_JPAD_J@Z
?pos@QIODevice@kso_qt@@UBE_JXZ
?open@QIODevice@kso_qt@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@kso_qt@@@2@@Z
?isSequential@QIODevice@kso_qt@@UBE_NXZ
?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z
?event@QObject@kso_qt@@UAE_NPAVQEvent@2@@Z
?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z
?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z
?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z
?close@QIODevice@kso_qt@@UAEXXZ
?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z
?canReadLine@QIODevice@kso_qt@@UBE_NXZ
?bytesToWrite@QIODevice@kso_qt@@UBE_JXZ
?bytesAvailable@QIODevice@kso_qt@@UBE_JXZ
?atEnd@QIODevice@kso_qt@@UBE_NXZ
?singleShot@QTimer@kso_qt@@SAXHPBVQObject@2@PBD@Z
??1QMutexLocker@kso_qt@@QAE@XZ
?unlock@QMutex@kso_qt@@QAEXXZ
?lock@QMutex@kso_qt@@QAEXXZ
??1QMutex@kso_qt@@QAE@XZ
??0QMutex@kso_qt@@QAE@W4RecursionMode@01@@Z
?elapsed@QTime@kso_qt@@QBEHXZ
?restart@QTime@kso_qt@@QAEHXZ
??0QTime@kso_qt@@QAE@XZ
?write@QIODevice@kso_qt@@QAE_JPBD_J@Z
??1QIODevice@kso_qt@@UAE@XZ
??0QIODevice@kso_qt@@QAE@XZ
??1QObject@kso_qt@@UAE@XZ
??0QObject@kso_qt@@QAE@PAV01@@Z
?toNativeSeparators@QDir@kso_qt@@SA?AVQString@2@ABV32@@Z
??1QString@kso_qt@@QAE@XZ
?registerNormalizedType@QMetaType@kso_qt@@SAHABVQByteArray@2@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@kso_qt@@@2@PBUQMetaObject@2@@Z
??4QString@kso_qt@@QAEAAV01@ABV01@@Z
??4QString@kso_qt@@QAEAAV01@VQLatin1String@1@@Z
??0QString@kso_qt@@QAE@$$QAV01@@Z
??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z
?fromWCharArray@QString@kso_qt@@SA?AV12@PB_WH@Z
??8kso_qt@@YA_NABVQString@0@0@Z
?detach@QListData@kso_qt@@QAEPAUData@12@H@Z
?detach_grow@QListData@kso_qt@@QAEPAUData@12@PAHH@Z
?dispose@QListData@kso_qt@@QAEXXZ
?dispose@QListData@kso_qt@@SAXPAUData@12@@Z
?staticMetaObject@QObject@kso_qt@@2UQMetaObject@2@B
?append@QListData@kso_qt@@QAEPAPAXXZ
?insert@QListData@kso_qt@@QAEPAPAXH@Z
?remove@QListData@kso_qt@@QAEXH@Z
?size@QListData@kso_qt@@QBEHXZ
?isEmpty@QListData@kso_qt@@QBE_NXZ
?at@QListData@kso_qt@@QBEPAPAXH@Z
?begin@QListData@kso_qt@@QBEPAPAXXZ
?end@QListData@kso_qt@@QBEPAPAXXZ
?nextNode@QMapNodeBase@kso_qt@@QBEPBU12@XZ
?setColor@QMapNodeBase@kso_qt@@QAEXW4Color@12@@Z
?setParent@QMapNodeBase@kso_qt@@QAEXPAU12@@Z
?recalcMostLeftNode@QMapDataBase@kso_qt@@QAEXXZ
?createNode@QMapDataBase@kso_qt@@QAEPAUQMapNodeBase@2@HHPAU32@_N@Z
?freeTree@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@H@Z
?createData@QMapDataBase@kso_qt@@SAPAU12@XZ
?freeData@QMapDataBase@kso_qt@@SAXPAU12@@Z
?shared_null@QListData@kso_qt@@2UData@12@B
?shared_null@QMapDataBase@kso_qt@@2U12@B
??0QMessageLogger@kso_qt@@QAE@PBDH0@Z
?warning@QMessageLogger@kso_qt@@QBAXPBDZZ
?cast@QMetaObject@kso_qt@@QBEPAVQObject@2@PAV32@@Z
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
ProcessIdToSessionId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetLongPathNameW
CreateFileW
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
lstrlenW
GetModuleFileNameW
LoadLibraryW
SetEnvironmentVariableW
GetEnvironmentVariableW
LoadLibraryExA
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
HeapFree
GetProcessHeap
Sleep
VerSetConditionMask
CloseHandle
GetLastError
SetEvent
WaitForSingleObject
SetWaitableTimer
HeapAlloc
CancelWaitableTimer
CreateEventExW
CreateWaitableTimerExW
GetSystemDirectoryW
GetSystemWow64DirectoryW
VerifyVersionInfoW
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
?KShellExecuteExW@kunsafe@krt@@YAHPAU_SHELLEXECUTEINFOW@@@Z
?_ClsidInFilterList@ksolite@@YA_NU_GUID@@_N@Z
?writeError@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?writeInfo@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
??1KPluginsSettings@@UAE@XZ
??0KPluginsSettings@@QAE@W4Scope@QSettings@kso_qt@@@Z
?writeWarning@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
_XCoCreateInstance
?_Xout_of_range@std@@YAXPBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_detach
?_Xlength_error@std@@YAXPBD@Z
_except_handler4_common
__CxxFrameHandler3
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__current_exception_context
_CxxThrowException
memcpy
memmove
__std_type_info_compare
memset
__current_exception
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_crt_atexit
_register_onexit_function
_cexit
_initterm
_beginthreadex
terminate
_initterm_e
_errno
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_CIlog
_CIexp
roundf
_CIlog10
_CIpow
malloc
free
_callnewh
__stdio_common_vswprintf
__stdio_common_vswprintf_s
towlower
_wcsnicmp
_wcsicmp
_stricmp
_time64
ksoCreateServiceInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ