Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7ed2013494b40019f4708700c8ab4d60N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7ed2013494b40019f4708700c8ab4d60N.exe
Resource
win10v2004-20240802-en
Target
7ed2013494b40019f4708700c8ab4d60N
Size
88KB
MD5
7ed2013494b40019f4708700c8ab4d60
SHA1
1cab6a402970af8e36a5734fcac0a04e387322b5
SHA256
696eafa7bf2d9aee8b0dc59b7eb9c45e77586648625479eb1bb750c2b8efa044
SHA512
aa9609b6bd84a46e82cfc500bea4a70aa94f2bcbced9be82b09b0f94d925a3dfcc1584144ca7a26120a30046da94c49d327ca8ef3bf838d4808e90cac1fc6ad9
SSDEEP
1536:ox8QAs7YwHd878va/OJP6jMLFYBfQDv61JM:oCQAOJHamCOJIMLFYBfQDv61S
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
e:\B_35_15371\Bin\Release\Cycomm.pdb
ord9
ord7
?Now@Time@Cmm@@SA?AV12@XZ
?GetSpecialDirectory@CFileName@Cmm@@QAEXW4SpecialFolder@12@H@Z
?GetZoomAccountManager@Cmm@@YAPAVIZoomAccountManager@zoom_data@@XZ
?NotifyClientDataTermed@Cmm@@YAXXZ
??Y?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??1?$CStringT@_W@Cmm@@UAE@XZ
??0?$CStringT@_W@Cmm@@QAE@PBD@Z
??0?$CStringT@_W@Cmm@@QAE@PB_W@Z
??0?$CStringT@_W@Cmm@@QAE@XZ
??4?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
??1?$CStringT@D@Cmm@@UAE@XZ
??0?$CStringT@D@Cmm@@QAE@PB_W@Z
??0?$CStringT@D@Cmm@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0?$CStringT@D@Cmm@@QAE@XZ
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV01@@Z
??1CFileName@Cmm@@UAE@XZ
?GetModuleFileNameW@CFileName@Cmm@@QAEXPAUHINSTANCE__@@@Z
?GetName@CFileName@Cmm@@QBEPB_WXZ
??0CFileName@Cmm@@QAE@XZ
??8?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@PBD@Z
??B?$CStringT@_W@Cmm@@QBEPB_WXZ
??1CCmmArchiveObjHelper@Cmm@@QAE@XZ
??0CCmmArchiveObjHelper@Cmm@@QAE@PBD@Z
?GetModuleLoader@Cmm@@YAPAVICmmModuleLoader@1@XZ
?FlatternToMsg@CCmmMessageHelper@Cmm@@YAPAVCmmMQ_Msg@2@PAVCCmmArchiveObjHelper@2@H@Z
?FreeMsg@CCmmMessageHelper@Cmm@@YAXPAVCmmMQ_Msg@2@@Z
?GetModuleRegistry@Cmm@@YAPAVICmmModuleRegistry@1@XZ
??1CSBMBMessage_NotifyNetworkStateChanged@@UAE@XZ
?Set_Flag@CSBMBMessage_NotifyNetworkStateChanged@@QAEXABI@Z
?Set_State@CSBMBMessage_NotifyNetworkStateChanged@@QAEXABI@Z
??0CSBMBMessage_NotifyNetworkStateChanged@@QAE@XZ
??1CSBMBMessage_NotifyAppInActive@@UAE@XZ
?Set_Reason@CSBMBMessage_NotifyAppInActive@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyAppInActive@@QAE@XZ
??1CSBMBMessage_NotifyAppActive@@UAE@XZ
?Set_Reason@CSBMBMessage_NotifyAppActive@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyAppActive@@QAE@XZ
?SetMinLogLevel@logging@@YAXH@Z
?BaseInitLoggingImpl_built_with_NDEBUG@logging@@YA_NPB_WW4LoggingDestination@1@W4LogLockingState@1@W4OldFileDeletionState@1@@Z
?cmm_str_convert@@YAIHPADIPB_WI@Z
?ToTimeT@Time@Cmm@@QBE_JXZ
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0?$CStringT@_W@Cmm@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0?$CStringT@_W@Cmm@@QAE@ABV01@@Z
?GetBuffer@?$CStringT@D@Cmm@@QAEPADI@Z
??Y?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
??0?$CStringT@D@Cmm@@QAE@PBD@Z
?GetSecond@CTime@Cmm@@QBEHXZ
?GetMinute@CTime@Cmm@@QBEHXZ
?GetHour@CTime@Cmm@@QBEHXZ
?GetDay@CTime@Cmm@@QBEHXZ
?GetMonth@CTime@Cmm@@QBEHXZ
?GetYear@CTime@Cmm@@QBEHXZ
?GetTickCount@CTime@Cmm@@SA?AV12@XZ
CmmMQ_TermService
?IsNewerVersion@Cmm@@YAHABV?$CStringT@D@1@@Z
?ClearAllPackageDefines@CCmmArchiveService@Cmm@@SAXXZ
?GetCurrentVersion@Cmm@@YAXAAV?$CStringT@D@1@@Z
?GetAppContext@Cmm@@YAPAVISSBAppContext@1@XZ
CmmMQ_InitService
?cmm_str_convert@@YAIHPA_WIPBDI@Z
?SetLength@?$CStringT@_W@Cmm@@QAEXI@Z
?GetBuffer@?$CStringT@_W@Cmm@@QAEPA_WI@Z
??9?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??9?$CStringT@_W@Cmm@@QBE_NPB_W@Z
??1CSBMBMessage_NotifyAppEvent@@UAE@XZ
?Set_Param@CSBMBMessage_NotifyAppEvent@@QAEXABV?$CStringT@_W@Cmm@@@Z
?Set_EventID@CSBMBMessage_NotifyAppEvent@@QAEXABI@Z
??0CSBMBMessage_NotifyAppEvent@@QAE@XZ
??1CSBMBMessage_NotifyBeforeTerm@@UAE@XZ
?Set_AppName@CSBMBMessage_NotifyBeforeTerm@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyBeforeTerm@@QAE@XZ
??1CSBMBMessage_NotifyAfterInit@@UAE@XZ
?Set_AppName@CSBMBMessage_NotifyAfterInit@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyAfterInit@@QAE@XZ
??1CSBMBMessage_TermThread@@UAE@XZ
?Set_AppName@CSBMBMessage_TermThread@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_TermThread@@QAE@XZ
??1CSBMBMessage_InitThread@@UAE@XZ
?Set_AppName@CSBMBMessage_InitThread@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_InitThread@@QAE@XZ
?GetModuleFilePath@CFileName@Cmm@@QAEXPAUHINSTANCE__@@@Z
?Init@CommandLine@Cmm@@SAXHPBQBD@Z
cmm_fs_find_first
?LoadFile@TiXmlDocument@@QAE_NPBDW4TiXmlEncoding@@@Z
??0TiXmlDocument@@QAE@XZ
?GetText@TiXmlElement@@QBEPBDXZ
??0?$CStringT@D@Cmm@@QAE@PBDI@Z
??4?$CStringT@D@Cmm@@QAEAAV01@ABV01@@Z
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
??1TiXmlDocument@@UAE@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?GetZoomAppPropData@Cmm@@YAPAVIZoomAppPropData@zoom_data@@XZ
?ForCurrentProcess@CommandLine@Cmm@@SAPAV12@XZ
?GetSwitchValueASCII@CommandLine@Cmm@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?GetZoomClientData@Cmm@@YAPAVIZoomClientData@zoom_data@@XZ
?CreateAppContext@Cmm@@YAPAVISSBAppContext@1@ABV?$CStringT@_W@1@HH@Z
CmmMQ_GetService
?DestroyAppContext@Cmm@@YAXPAVISSBAppContext@1@@Z
?SetLength@?$CStringT@D@Cmm@@QAEXI@Z
?UnInitHdpi@CHighDpi@DuiLib@@SAXXZ
?InitHdpi@CHighDpi@DuiLib@@SAHXZ
ZAccTermModule
ZAccInitModule
util_init
enable_logger
util_uninit
CreateEventW
CloseHandle
CreateDirectoryW
GetModuleHandleW
GetProcAddress
GetCurrentProcessId
OutputDebugStringW
GetFileAttributesW
FindClose
FindNextFileW
GetTempFileNameW
SetErrorMode
GetCurrentProcess
GetLastError
Sleep
GetVersionExW
TerminateProcess
GetTickCount
DeleteFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
LocalFree
IsDebuggerPresent
GetPrivateProfileStringW
QueryPerformanceCounter
GetCurrentThreadId
DestroyWindow
UnregisterClassW
SetFocus
GetClassInfoW
ShowWindow
CreateWindowExW
RegisterClassW
SendMessageW
IsWindow
FindWindowW
PostMessageW
DefWindowProcW
UpdateWindow
GetUserNameW
SHGetSpecialFolderPathW
ShellExecuteW
CoUninitialize
CoInitialize
?release@net_adaptors_t@ssb@@SAXAAPAV12@@Z
?enum_netadaptors@net_adaptors_t@ssb@@SAPAV12@XZ
?get_adaptor_mac_addr@net_adaptors_t@ssb@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
memset
_CxxThrowException
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_adjust_fdiv
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_invalid_parameter_noinfo
_itow_s
signal
_set_abort_behavior
_set_invalid_parameter_handler
getenv
_putenv
_wcsicmp
_wstat64i32
wcscat_s
_unlock
__dllonexit
_encode_pointer
_lock
GdiplusStartup
GdiplusShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ