Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6dc09fbe0990568aa52f19a32e8fca30N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6dc09fbe0990568aa52f19a32e8fca30N.dll
Resource
win10v2004-20240802-en
Target
6dc09fbe0990568aa52f19a32e8fca30N.exe
Size
813KB
MD5
6dc09fbe0990568aa52f19a32e8fca30
SHA1
0259f566335076f66b19d3d170416a6abd08fe05
SHA256
ba8169bac90b3e05e92380ce98cee813c02a07ea64dd3229f13e45f83ec4bdb8
SHA512
deff117fa8a5bba2996efc1f02014c5b46e9acd84a72075e45654dd76ef8e6fe7c62c127f34cc47bbfd1c42e85af9779ea9cb4cf61039b016e0ee352abafe179
SSDEEP
12288:Bs1OxdHPZpes5uKMYgapxML8VQeHoQAu6YAWsoI+S2BjvrEH7h:QudHPZpes5uFFapfHAWYgrEH7h
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\HOffice130\Build\WindowsDesktopOffice\Bin\Plugin\HwpPlugin.pdb
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalSize
InitializeCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
HeapAlloc
HeapFree
FindClose
GetUserDefaultLCID
GetLocaleInfoW
lstrcmpW
GlobalAlloc
GlobalLock
GlobalUnlock
SetLastError
GetCurrentThreadId
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
EncodePointer
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
DecodePointer
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
MulDiv
GetMessageTime
IsRectEmpty
GetClipboardData
SetClipboardData
GetCaretBlinkTime
GetKeyState
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
EndPaint
IsChild
GetFocus
SetFocus
GetWindow
GetDlgItem
GetClassNameW
GetSysColor
EmptyClipboard
RedrawWindow
GetClassInfoExW
CreateAcceleratorTableW
ClientToScreen
GetParent
SetCapture
ReleaseCapture
FillRect
GetClientRect
InvalidateRgn
CallWindowProcW
InvalidateRect
GetDC
ReleaseDC
DestroyAcceleratorTable
GetWindowLongW
SetWindowLongW
DefWindowProcW
LoadCursorW
RegisterClassExW
CreateWindowExW
SendMessageW
DestroyWindow
IsWindow
MoveWindow
CopyRect
PtInRect
SetRect
GetWindowRect
ScreenToClient
RegisterWindowMessageW
CloseClipboard
GetCapture
OffsetRect
OpenClipboard
PeekMessageW
SetTimer
KillTimer
CreateCaret
DestroyCaret
SetCaretPos
GetDoubleClickTime
MessageBeep
SetWindowPos
UnregisterClassW
CharNextW
GetKeyboardLayout
GetDesktopWindow
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegDeleteKeyW
StringFromGUID2
StringFromCLSID
OleUninitialize
CoCreateGuid
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
SysStringLen
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantInit
LoadRegTypeLi
SysStringByteLen
VariantClear
OleCreateFontIndirect
SysFreeString
LoadTypeLi
VarUI4FromStr
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
LresultFromObject
__std_exception_copy
__std_type_info_destroy_list
_except_handler4_common
memcpy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__std_terminate
wcsstr
wcschr
memmove
memset
_purecall
towupper
iswdigit
_wcsicmp
wcscpy_s
wcsncmp
_wcsnicmp
wcscat_s
iswascii
isdigit
_wcsupr_s
iswspace
wcsncpy_s
strcpy_s
iswalpha
_recalloc
malloc
free
_callnewh
realloc
terminate
_initterm
_cexit
_invalid_parameter_noinfo
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_seh_filter_dll
_configure_narrow_argv
_register_onexit_function
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_wremove
_waccess
_waccess_s
_wmakepath_s
fclose
fread
fwrite
fseek
_wfopen_s
__stdio_common_vswprintf_s
rand
srand
qsort
_time64
wcstol
_itow_s
_ultoa_s
_wtoi
_ltoa_s
_itoa_s
_wtol
LineTo
DPtoLP
ExtCreatePen
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
CreatePen
SelectObject
DeleteObject
GetObjectW
BitBlt
DeleteDC
GetStockObject
MoveToEx
GetDeviceCaps
SelectClipRgn
CreateRectRgn
SetROP2
?ReleaseBuffer@CHncStringW@@QAEHH@Z
?GetBuffer@CHncStringW@@QAEPAGH@Z
?RemoveAt@CHncPtrArray@@QAEXHH@Z
?SetAtGrow@CHncPtrArray@@QAEHHPAX@Z
??1CHncPtrArray@@QAE@XZ
??0CHncPtrArray@@QAE@XZ
_HncMstBeginThread@8
HncIsWindows
HncIntMulDiv
?IsEnUS@Framework@Hnc@@QBE_NXZ
?GetStringValue@CHncRegistry@@QAEHPBG0PAGH@Z
?UnlockBuffer@CHncStringW@@QAEXXZ
?LockBuffer@CHncStringW@@QAEPAGXZ
?MakeLower@CHncStringW@@QAEAAV1@XZ
?HncGetRegPath@@YAPBGHPAU_tagRegPathInfo@@H@Z
HncLoadLibraryModulePath
?GetBinaryValue@CHncRegistry@@QAEHPBG0PAEPAI@Z
?DeleteValue@CHncRegistry@@QAEHPBG0@Z
HncGetFileAttributes
HncAppendBackSlash
HncIsDarwin
HncIsMobile
HncCreateProcessObject
HncReleaseProcessObject
__UCSCHAR_TO_SURCHAR@4
GetArabicUnicodeLamAlefMapping
?HncGetJamoBlock@@YGHPBGHPAG11@Z
BidiResolveWhitespace
BidiAlgorithm
?HncJamoToHangulSyllable@@YGGGGG@Z
HncClassFromChN
?HncJamoToPUASyllable@@YGGGGG@Z
__SURCHAR_TO_UCSCHAR@4
GetBidiMirroredChar
BidiMirrored
HncBidiJoining
HncClassFromChWS
GetBidiShape
HncIsUnix
__MAKE_UCSCHAR@8
??0CHncMArrayBase@@QAE@HH@Z
??1CHncMArrayBase@@UAE@XZ
?FreeExtra@CHncMArrayBase@@QAEXXZ
?_Assign@CHncMArrayBase@@MAEHPAXPBX@Z
?_Compare@CHncMArrayBase@@MAEHPBX0J@Z
?_MakeRoom@CHncMArrayBase@@AAEHHH@Z
?_GetPtr@CHncMArrayBase@@ABEPAXH@Z
?HncMakeNumString@@YGXIHPAGIPBGH@Z
_HncCheckTabletOfficePackage@0
??0CHncStringA@@QAE@XZ
?Assign@CHncStringA@@QAEHPBD@Z
??1CHncStringA@@QAE@XZ
?Assign@CHncStringW@@QAEHPBGH_N@Z
?Right@CHncStringW@@QBE?AV1@H@Z
?TrimRight@CHncStringW@@QAEAAV1@XZ
?ReverseFind@CHncStringW@@QBEHG@Z
?Replace@CHncStringW@@QAEHGG@Z
?GetBufferSetLength@CHncStringW@@QAEPAGH@Z
_GetUnicodeCategory@4
HncUnicodeToAnsi
?IsOption@Framework@Hnc@@QBE_NABVCHncStringW@@@Z
?GetResource@Hnc@@YAAAVResourceProxy@1@XZ
??1CHncStringW@@QAE@XZ
?Assign@CHncStringW@@QAEHABV1@@Z
?HncCreateParameterSet@@YAPAUIHncParameterSet@@I@Z
_HncGetMstMode@0
??0CHncStringW@@QAE@XZ
??0CHncStringW@@QAE@PBG@Z
?ParamClear@tagHNCPARAM@@QAEXXZ
??0CHncStringParameterSet@@QAE@XZ
??1CHncStringParameterSet@@UAE@XZ
?Assign@CHncStringW@@QAEHPBG@Z
?SetBuffer@CHncStringParameterSet@@QAEHPBGH@Z
?GetItemSet@CHncStringParameterSet@@QBEHPBGAAV1@@Z
?GetWString@CHncStringParameterSet@@QBEHPBGAAVCHncStringW@@@Z
HncSetError
??0CHncRegistry@@QAE@H@Z
??1CHncRegistry@@UAE@XZ
?SetRegistryKey@CHncRegistry@@QAEXPBGPAUHKEY__@@@Z
?HncGetRegPath@@YAPBGW4HncRegPathID@@@Z
?GetStringValue@CHncRegistry@@QAEHPBG0AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
HncLoadLibrary
?Format@CHncStringW@@QAAHPBGZZ
??0CHncRegistry@@QAE@PBGPAUHKEY__@@H@Z
HncFileExist
HncRegOpenKeyEx
HncRegCreateKeyEx
HncRegQueryValueEx
HncRegSetValueEx
HncRegCloseKey
?IsKoKR@Framework@Hnc@@QBE_NXZ
?GetFramework@Hnc@@YAAAVFramework@1@XZ
??0CHncStringW@@QAE@ABV0@@Z
?Concat@CHncStringW@@QAEHABV1@@Z
?Concat@CHncStringW@@QAEHPBG@Z
HncPathCreate
HncAnsiToUnicode
?SetBool@CHncStringParameterSet@@QAEHPBGH@Z
?SetInteger@CHncStringParameterSet@@QAEHPBGH@Z
?GetInt@CHncStringParameterSet@@QBEHPBGPAH@Z
?GetWString@CHncStringParameterSet@@QBEHPBGAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?GetBuffer@CHncStringParameterSet@@QAEPBGXZ
?SetWString@CHncStringParameterSet@@QAEHPBG0@Z
?SetItemSet@CHncStringParameterSet@@QAEHAAV1@@Z
?SetUint@CHncStringParameterSet@@QAEHPBGI@Z
?SetSetName@CHncStringParameterSet@@QAEXPBG@Z
?GetUint@CHncStringParameterSet@@QBEHPBGPAI@Z
?FindOneOf@CHncStringW@@QBEHPBG@Z
?Find@CHncStringW@@QBEHG@Z
?Mid@CHncStringW@@QBE?AV1@H@Z
?Mid@CHncStringW@@QBE?AV1@HH@Z
?TrimRight@CHncStringW@@QAEAAV1@G@Z
?MakeUpper@CHncStringW@@QAEAAV1@XZ
?Replace@CHncStringW@@QAEHPBG0@Z
HncFindNextFile
HncFindFirstFile
HncExistDir
?Find@CHncStringW@@QBEHPBG@Z
?TrimLeft@CHncStringW@@QAEAAV1@XZ
?SpanExcluding@CHncStringW@@QBE?AV1@PBG@Z
?ConcatCopy@CHncStringW@@IAEHHPBGH0@Z
?Left@CHncStringW@@QBE?AV1@H@Z
HncPathToAbsolute
?Concat@CHncStringW@@QAEHG@Z
?Empty@CHncStringW@@QAEHXZ
HncGetError
_libm_sse2_sin_precise
ceil
_libm_sse2_cos_precise
_libm_sse2_log_precise
??0CHncAABase@@QAE@ABV0@@Z
??0CHncAABase@@QAE@XZ
??1CHncAABase@@UAE@XZ
??4CHncAABase@@QAEAAV0@ABV0@@Z
??_7CHncAABase@@6B@
?DisconnectAll@CHncAABase@@UAGJXZ
?GetAccessibleBySubType@CHncAABase@@UAEPAV1@J@Z
?QueryAccessibleProxyInterface@CHncAABase@@QAEJPAPAUIHncAccessibleProxy@@@Z
?QueryDispatchInterface@CHncAABase@@QAEJPAPAUIDispatch@@@Z
?QueryDispatchInterface@CHncAABase@@SAJPAV1@PAPAUIDispatch@@@Z
?__autoclassinit2@CHncAABase@@QAEXI@Z
?accDoDefaultAction@CHncAABase@@UAGJUtagVARIANT@@@Z
?accDoDefaultAction_child@CHncAABase@@UAEJJ@Z
?accDoDefaultAction_self@CHncAABase@@UAEJXZ
?accHitTest@CHncAABase@@UAGJJJPAUtagVARIANT@@@Z
?accHitTestByLocation@CHncAABase@@QAEJJJPAUtagVARIANT@@@Z
?accLocation@CHncAABase@@UAGJPAJ000UtagVARIANT@@@Z
?accLocation_child@CHncAABase@@UAEJJAAUtagRECT@@@Z
?accLocation_self@CHncAABase@@UAEJAAUtagRECT@@@Z
?accNavigate@CHncAABase@@UAGJJUtagVARIANT@@PAU2@@Z
?accSelect@CHncAABase@@UAGJJUtagVARIANT@@@Z
?accSelect_child@CHncAABase@@UAEJJJ@Z
?accSelect_self@CHncAABase@@UAEJJ@Z
?get_accChild@CHncAABase@@UAGJUtagVARIANT@@PAPAUIDispatch@@@Z
?get_accChildCount@CHncAABase@@UAGJPAJ@Z
?get_accChild_child@CHncAABase@@UAEJJPAPAUIDispatch@@@Z
?get_accChild_self@CHncAABase@@UAEJPAPAUIDispatch@@@Z
?get_accDefaultAction@CHncAABase@@UAGJUtagVARIANT@@PAPAG@Z
?get_accDefaultAction_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accDefaultAction_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accDescription@CHncAABase@@UAGJUtagVARIANT@@PAPAG@Z
?get_accDescription_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accDescription_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accFocus@CHncAABase@@UAGJPAUtagVARIANT@@@Z
?get_accFocus_self@CHncAABase@@UAEJAAJ@Z
?get_accHelp@CHncAABase@@UAGJUtagVARIANT@@PAPAG@Z
?get_accHelpTopic@CHncAABase@@UAGJPAPAGUtagVARIANT@@PAJ@Z
?get_accHelpTopic_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAJ@Z
?get_accHelpTopic_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAJ@Z
?get_accHelp_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accHelp_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accKeyboardShortcut@CHncAABase@@UAGJUtagVARIANT@@PAPAG@Z
?get_accKeyboardShortcut_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accKeyboardShortcut_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accName@CHncAABase@@UAGJUtagVARIANT@@PAPAG@Z
?get_accName_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accName_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accParent@CHncAABase@@UAGJPAPAUIDispatch@@@Z
?get_accRole@CHncAABase@@UAGJUtagVARIANT@@PAU2@@Z
?get_accRole_child@CHncAABase@@UAEJJAAJ@Z
?get_accRole_self@CHncAABase@@UAEJAAJ@Z
?get_accSelection@CHncAABase@@UAGJPAUtagVARIANT@@@Z
?get_accSelection_self@CHncAABase@@UAEJAAJ@Z
?get_accState@CHncAABase@@UAGJUtagVARIANT@@PAU2@@Z
?get_accState_child@CHncAABase@@UAEJJAAJ@Z
?get_accState_self@CHncAABase@@UAEJAAJ@Z
?get_accValue@CHncAABase@@UAGJUtagVARIANT@@PAPAG@Z
?get_accValue_child@CHncAABase@@UAEJJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?get_accValue_self@CHncAABase@@UAEJAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?haccUnregister@CHncAABase@@UAGJXZ
?put_accName@CHncAABase@@UAGJUtagVARIANT@@PAG@Z
?put_accValue@CHncAABase@@UAGJUtagVARIANT@@PAG@Z
?set_haccParent@CHncAABase@@QAEJPAV1@@Z
HwpGetPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ