Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
9bdf334fc993ded4ff4f9b9a4f1dd0c0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9bdf334fc993ded4ff4f9b9a4f1dd0c0N.dll
Resource
win10v2004-20240709-en
Target
9bdf334fc993ded4ff4f9b9a4f1dd0c0N.exe
Size
2.0MB
MD5
9bdf334fc993ded4ff4f9b9a4f1dd0c0
SHA1
203fecf8322b13520e867b7382ed0a62f39c9a61
SHA256
598d8602bb9fe5dc9a9fd506201cc9547888a551acb054c6d3d31d225b98c72a
SHA512
a6dee822798ba71cdc89e5d2813eec6e672d679ed7828873cb754cf0fcf13204a3c21c58c327cf2a4d1b712fed17322732d0fb74b1fdc08a172a4a7ee75a1d2d
SSDEEP
24576:wnLG08vzBhnUkAGdDe9lgTetLQnh7lT+eaiOR+CXEnasVXJbmgXThiCq:wnUvFhUqe+TetUh5ieaiWXU3q
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\jenkins\workspace\Client\Client\Windows\release\Bin\x64\Release\XmppDll.pdb
?c_str@?$CStringT@_W@Cmm@@QEBAPEB_WXZ
?length@?$CStringT@_W@Cmm@@QEBA_KXZ
??0?$CStringT@D@Cmm@@QEAA@XZ
??1?$CStringT@D@Cmm@@UEAA@XZ
?GetStr@CmmGUID@Cmm@@QEAAAEAV?$CStringT@_W@2@H@Z
?GetCData@?$CStringT@D@Cmm@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?IsEmpty@?$CStringT@D@Cmm@@QEBAHXZ
?StringToInt@Cmm@@YAHAEBV?$CStringT@_W@1@AEAH@Z
??0?$CStringT@_W@Cmm@@QEAA@PEB_W@Z
??0?$CStringT@_W@Cmm@@QEAA@XZ
??1?$CStringT@_W@Cmm@@UEAA@XZ
??0CTime@Cmm@@QEAA@HHHHHHHH@Z
?FromTimeT@Time@Cmm@@SA?AV12@_J@Z
?IsEmpty@?$CStringT@_W@Cmm@@QEBAHXZ
?StringToUInt@Cmm@@YAHAEBV?$CStringT@_W@1@AEAI@Z
?StringToInt64@Cmm@@YAHAEBV?$CStringT@D@1@AEA_J@Z
??4?$CStringT@_W@Cmm@@QEAAAEAV01@$$QEAV01@@Z
?length@?$CStringT@D@Cmm@@QEBA_KXZ
?SetLength@?$CStringT@D@Cmm@@QEAAX_K@Z
?GetBuffer@?$CStringT@D@Cmm@@QEAAPEAD_K@Z
?cmm_str_convert@@YA_KHPEAD_KPEB_W1@Z
?cmm_str_convert@@YA_KHPEA_W_KPEBD1@Z
?GetBuffer@?$CStringT@_W@Cmm@@QEAAPEA_W_K@Z
?SetLength@?$CStringT@_W@Cmm@@QEAAX_K@Z
??0?$CStringT@_W@Cmm@@QEAA@$$QEAV01@@Z
?find@?$CStringT@D@Cmm@@QEBA_KD_K@Z
?rfind@?$CStringT@D@Cmm@@QEBA_KD_K@Z
?size@?$CStringT@D@Cmm@@QEBA_KXZ
?substr@?$CStringT@D@Cmm@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K0@Z
??0?$CStringT@D@Cmm@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4?$CStringT@D@Cmm@@QEAAAEAV01@PEBD@Z
??4?$CStringT@D@Cmm@@QEAAAEAV01@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4?$CStringT@_W@Cmm@@QEAAAEAV01@PEB_W@Z
?AssignOther@?$CStringT@_W@Cmm@@QEAAAEAV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AssignOther@?$CStringT@_W@Cmm@@QEAAAEAV12@AEBV?$CStringT@D@2@@Z
??1CCmmPerfTelemetryStacks@@QEAA@XZ
??0CCmmPerfTelemetryStacks@@QEAA@AEBV?$CStringT@D@Cmm@@0H@Z
CmmAlloc
??1CCmmPerfTelemetryEventWStack@@QEAA@XZ
??0CCmmPerfTelemetryEventWStack@@QEAA@W4ZoomLogSubEvent@@AEBV?$map@W4ZoomLogTagName@@V?$CStringT@D@Cmm@@U?$less@W4ZoomLogTagName@@@std@@V?$allocator@U?$pair@$$CBW4ZoomLogTagName@@V?$CStringT@D@Cmm@@@std@@@5@@std@@H@Z
CmmFree
?Int64ToString@Cmm@@YAH_JAEAV?$CStringT@D@1@@Z
?ToTimeTInMS@Time@Cmm@@QEBA_JXZ
?MM_Svr_Now@Time@Cmm@@SA?AV12@XZ
?Now@Time@Cmm@@SA?AV12@XZ
??0?$CStringT@D@Cmm@@QEAA@AEBV01@@Z
??H?$CStringT@D@Cmm@@QEBA?AV01@AEBV01@@Z
??4?$CStringT@D@Cmm@@QEAAAEAV01@AEBV01@@Z
??Y?$CStringT@D@Cmm@@QEAAAEAV01@PEBD@Z
??Y?$CStringT@D@Cmm@@QEAAAEAV01@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??Y?$CStringT@D@Cmm@@QEAAAEAV01@AEBV01@@Z
?GetLength@?$CStringT@D@Cmm@@QEBA_KXZ
??1CCritical@Cmm@@QEAA@XZ
??0CCritical@Cmm@@QEAA@XZ
?is_null@Time@Cmm@@QEBA_NXZ
??8?$CStringT@_W@Cmm@@QEBA_NAEBV01@@Z
?empty@?$CStringT@_W@Cmm@@QEBA_NXZ
??0?$CStringT@_W@Cmm@@QEAA@AEBV01@@Z
?clear@?$CStringT@_W@Cmm@@QEAAXXZ
??4?$CStringT@_W@Cmm@@QEAAAEAV01@AEBV01@@Z
??0?$CStringT@D@Cmm@@QEAA@$$QEAV01@@Z
??M?$CStringT@_W@Cmm@@QEBA_NAEBV01@@Z
??0Time@Cmm@@QEAA@XZ
?clear@?$CStringT@D@Cmm@@QEAAXXZ
?InSeconds@TimeDelta@Cmm@@QEBA_JXZ
?InMilliseconds@TimeDelta@Cmm@@QEBA_JXZ
?MM_Now@Time@Cmm@@SA?AV12@XZ
?MM_InitWithServerTime@Time@Cmm@@SAXAEBV12@@Z
?IntToString@Cmm@@YAXHAEAV?$CStringT@_W@1@@Z
?AssignOther@?$CStringT@D@Cmm@@QEAAAEAV12@AEBV?$CStringT@_W@2@@Z
?Lock@CCritical@Cmm@@QEAAXXZ
??4?$CStringT@D@Cmm@@QEAAAEAV01@V?$CRangeT@PEBD@1@@Z
?AssignOther@?$CStringT@D@Cmm@@QEAAAEAV12@PEB_W@Z
?append@?$CStringT@_W@Cmm@@QEAAAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV12@@Z
??Y?$CStringT@_W@Cmm@@QEAAAEAV01@PEB_W@Z
??Y?$CStringT@_W@Cmm@@QEAAAEAV01@AEBV01@@Z
?Find@?$CStringT@_W@Cmm@@QEBAPEA_WPEB_W_K@Z
??4?$CStringT@D@Cmm@@QEAAAEAV01@$$QEAV01@@Z
?Compare@?$CStringT@_W@Cmm@@QEBAHPEB_W@Z
??9?$CStringT@_W@Cmm@@QEBA_NAEBV01@@Z
?CompareNoCase@?$CStringT@_W@Cmm@@QEBAHAEBV12@@Z
?bMetricsEnabled_@CCmmPerfTelemetry@@0HA
?FromTimeTInMS@Time@Cmm@@SA?AV12@_J@Z
?CmmStringFromInt64@Cmm@@YA?AV?$CStringT@D@1@_J@Z
??0?$CStringT@_W@Cmm@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?MakeLower@?$CStringT@_W@Cmm@@QEAAXXZ
??8?$CStringT@_W@Cmm@@QEBA_NPEB_W@Z
?GetGmtTm@CTime@Cmm@@QEBAXAEAUtm@@@Z
??0CTime@Cmm@@QEAA@AEAUtm@@H@Z
?StringToUInt64@Cmm@@YAHAEBV?$CStringT@_W@1@AEA_K@Z
?find@?$CStringT@D@Cmm@@QEBA_KPEBD_K@Z
?StringToInt@Cmm@@YAHAEBV?$CStringT@D@1@AEAH@Z
?ToTimeT@Time@Cmm@@QEBA_JXZ
?GetLength@?$CStringT@_W@Cmm@@QEBA_KXZ
?UInt64ToString@Cmm@@YAX_KAEAV?$CStringT@_W@1@@Z
?UInt64ToString@Cmm@@YAX_KAEAV?$CStringT@D@1@@Z
?IntToString@Cmm@@YAXHAEAV?$CStringT@D@1@@Z
?StringToInt64@Cmm@@YAHAEBV?$CStringT@_W@1@AEA_J@Z
?cmm_str_convert@@YA_KHPEAD_KHPEBD1@Z
??M?$CStringT@D@Cmm@@QEBA_NAEBV01@@Z
??4?$CStringT@_W@Cmm@@QEAAAEAV01@V?$CRangeT@PEB_W@1@@Z
??B?$CStringT@D@Cmm@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??9?$CStringT@D@Cmm@@QEBA_NPEBD@Z
?Trim@?$CStringT@D@Cmm@@QEAAXXZ
?find@?$CStringT@_W@Cmm@@QEBA_KPEB_W_K@Z
?substr@?$CStringT@_W@Cmm@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_K0@Z
??4?$CStringT@_W@Cmm@@QEAAAEAV01@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??O?$CStringT@_W@Cmm@@QEBA_NAEBV01@@Z
?StringToUInt64@Cmm@@YAHAEBV?$CStringT@D@1@AEA_K@Z
?find@?$CStringT@_W@Cmm@@QEBA_K_W_K@Z
?CompareNoCase@?$CStringT@_W@Cmm@@QEBAHPEB_W@Z
?Compare@?$CStringT@D@Cmm@@QEBAHPEBD@Z
?asString@Value@Json@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?isString@Value@Json@@QEBA_NXZ
??0Value@Json@@QEAA@W4ValueType@1@@Z
??1Value@Json@@QEAA@XZ
??0Reader@Json@@QEAA@XZ
?parse@Reader@Json@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVValue@2@_N@Z
?isMemberWithValidFormat@Value@Json@@QEBA_NPEBD@Z
??AValue@Json@@QEAAAEAV01@PEBD@Z
?Assign@?$CStringT@D@Cmm@@QEAAXPEBD_K@Z
??8?$CStringT@D@Cmm@@QEBA_NPEBD@Z
?CompareNoCase@?$CStringT@D@Cmm@@QEBAHPEBD@Z
?asInt@Value@Json@@QEBAHXZ
?isInt@Value@Json@@QEBA_NXZ
?asInt64@Value@Json@@QEBA_JXZ
?isInt64@Value@Json@@QEBA_NXZ
?asCString@Value@Json@@QEBAPEBDXZ
?isEqual@ValueIteratorBase@Json@@IEBA_NAEBV12@@Z
?increment@ValueIteratorBase@Json@@IEAAXXZ
?deref@ValueIteratorBase@Json@@IEAAAEAVValue@2@XZ
?isArray@Value@Json@@QEBA_NXZ
?begin@Value@Json@@QEAA?AVValueIterator@2@XZ
?end@Value@Json@@QEAA?AVValueIterator@2@XZ
?removeMember@Value@Json@@QEAAXPEBD@Z
??0FastWriter@Json@@QEAA@XZ
?write@FastWriter@Json@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVValue@2@@Z
??1Writer@Json@@UEAA@XZ
??0?$CStringT@D@Cmm@@QEAA@PEBD_K@Z
?StringToBool@Cmm@@YAHAEBV?$CStringT@_W@1@AEAH@Z
?AssignOther@?$CStringT@_W@Cmm@@QEAAAEAV12@PEBD@Z
?c_str@?$CStringT@D@Cmm@@QEBAPEBDXZ
??0?$CStringT@D@Cmm@@QEAA@PEBD@Z
??1CmmGUID@Cmm@@QEAA@XZ
?Unlock@CCritical@Cmm@@QEAAXXZ
??0CmmGUID@Cmm@@QEAA@XZ
WSAGetLastError
setsockopt
htons
recv
WSACleanup
__WSAFDIsSet
closesocket
gethostbyname
select
WSAStartup
getsockname
getprotobyname
send
socket
ntohs
connect
inet_ntoa
EVP_DecodeBlock
EVP_EncodeBlock
?add_ssl_ctx@socket_ctx_t@ssb@@QEAAXPEAVssl_context_t@2@@Z
?get_device_type@socket_ctx_t@ssb@@QEAAIAEAIAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAV34@@Z
?dump@socket_ctx_t@ssb@@QEBAXXZ
??1?$ref_count_t@Unull_lock@ssb@@@ssb@@MEAA@XZ
?on_self_destroy@?$ref_count_t@Unull_lock@ssb@@@ssb@@MEAAXXZ
?new_instance@socket_ctx_t@ssb@@SAPEAV12@PEBCIIPEAVmsg_db_t@2@@Z
?load_ca@ssl_ctx_t@ssb@@QEAAHPEBC0@Z
?set_verify_method@ssl_ctx_t@ssb@@QEAAX_N@Z
?new_instance@async_socket_it@ssb@@SAPEAV12@PEAVsocket_ctx_t@2@PEAVthread_wrapper_t@2@@Z
?get_opt@async_socket_sink_it@ssb@@UEAAHHPEAX@Z
?set_opt@async_socket_sink_it@ssb@@UEAAHHPEAX@Z
?on_error@async_socket_sink_it@ssb@@UEAAXHHPEAVasync_socket_it@2@@Z
?on_connect_ex@async_socket_sink_it@ssb@@UEAAXHPEAVasync_socket_it@2@PEAVthread_wrapper_t@2@PEAVsocket_ctx_t@2@@Z
??0async_socket_param_t@ssb@@QEAA@I@Z
?new_instance@ssl_context_t@ssb@@SAPEAV12@HHPEAC00PEBCPEAPEBC222I@Z
?append@proxy_ctx_t@ssb@@QEAAHPEAV12@@Z
?new_instance@proxy_ctx_t@ssb@@SAPEAV12@W4PROXY_TYPE@12@PEBCG1PEAV12@@Z
??0async_socket_sink_it@ssb@@QEAA@XZ
?get_count@?$ref_count_t@Unull_lock@ssb@@@ssb@@UEAAIXZ
?decrement@?$ref_count_t@Unull_lock@ssb@@@ssb@@UEAAIXZ
?increment@?$ref_count_t@Unull_lock@ssb@@@ssb@@UEAAIXZ
??0?$ref_count_t@Unull_lock@ssb@@@ssb@@QEAA@XZ
?get_display_addr@socket_ctx_t@ssb@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?get_cert_info@ssl_ctx_t@ssb@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?on_connect_exx@async_socket_sink_it@ssb@@UEAAXHPEAVasync_socket_it@2@PEAVthread_wrapper_t@2@PEAVsocket_ctx_t@2@AEAV_uuid_t@2@@Z
?on_monitor@async_socket_sink_it@ssb@@UEAAHPEADI@Z
?is_living@async_socket_sink_it@ssb@@UEBA_NXZ
??1async_socket_sink_it@ssb@@UEAA@XZ
?length@text_stream_t@ssb@@QEBAIXZ
?write@msg_db_t@ssb@@QEAAHPEBCIPEAI@Z
?release@msg_db_t@ssb@@QEAAPEAV12@XZ
??0log_stream_t@ssb@@QEAA@PEACIPEBC1@Z
??1log_stream_t@ssb@@UEAA@XZ
??6log_stream_t@ssb@@QEAAAEAV01@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?new_instance@msg_db_t@ssb@@SAPEAV12@I@Z
??6log_stream_t@ssb@@QEAAAEAV01@PEAX@Z
??6log_stream_t@ssb@@QEAAAEAV01@PEBD@Z
??6log_stream_t@ssb@@QEAAAEAV01@PEBC@Z
??6log_stream_t@ssb@@QEAAAEAV01@I@Z
??6log_stream_t@ssb@@QEAAAEAV01@H@Z
?instance@thread_mgr_t@ssb@@SAPEAV12@XZ
??Btext_stream_t@ssb@@QEAAPEACXZ
?find_by_type@thread_mgr_t@ssb@@QEBAPEAVthread_wrapper_t@2@I@Z
crc_16
?instance@mem_log_file@ssb@@SAPEAV12@I@Z
??0plugin_lock@mem_log_file@ssb@@QEAA@XZ
??1plugin_lock@mem_log_file@ssb@@QEAA@XZ
get_cur_pid
?read@msg_db_t@ssb@@QEAAHPEACIPEAI_N@Z
??6log_stream_t@ssb@@QEAAAEAV01@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??6log_stream_t@ssb@@QEAAAEAV01@_J@Z
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
DeleteCriticalSection
FileTimeToSystemTime
MultiByteToWideChar
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
RtlVirtualUnwind
GetModuleHandleW
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
AcquireCredentialsHandleW
QueryContextAttributesW
DeleteSecurityContext
EncryptMessage
InitializeSecurityContextA
FreeCredentialsHandle
FreeContextBuffer
DecryptMessage
InitializeSecurityContextW
CertFreeCertificateChain
CertNameToStrA
CertGetCertificateChain
CertVerifyCertificateChainPolicy
__CxxFrameHandler4
__current_exception
__C_specific_handler
wcsstr
_CxxThrowException
wcschr
strchr
_purecall
__std_exception_destroy
__std_exception_copy
__std_terminate
memset
__std_type_info_destroy_list
memmove
memcpy
memcmp
memchr
__current_exception_context
strstr
__RTDynamicCast
_execute_onexit_table
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_invalid_parameter_noinfo_noreturn
free
malloc
realloc
_callnewh
calloc
rand
srand
_time64
_mktime64
isdigit
tolower
strncmp
__stdio_common_vsprintf
strtol
atoi
ceilf
?CreateXmppClient@ssb_xmpp@@YAPEAVISSBXmppClient@1@XZ
?DestroyXmppClient@ssb_xmpp@@YAXPEAVISSBXmppClient@1@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ