Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
801e8c30f187fb6ec220f2e51a1c168ba58bd43e96a7186131845b74ff9a1eadN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
801e8c30f187fb6ec220f2e51a1c168ba58bd43e96a7186131845b74ff9a1eadN.dll
Resource
win10v2004-20241007-en
Target
801e8c30f187fb6ec220f2e51a1c168ba58bd43e96a7186131845b74ff9a1eadN
Size
128KB
MD5
99353750d61114c0f08d04bf8a74f770
SHA1
005fdbdb32803d5a7367b3fa416849a11b375572
SHA256
801e8c30f187fb6ec220f2e51a1c168ba58bd43e96a7186131845b74ff9a1ead
SHA512
d378260886daf2fe5a06203350a97df8d37b6951ba6d8df20c0a222b4d85743b24ed7c19ae1a2e6e669e511b16bddf9f38200ec2087f791d7fb4f1cb6f878d58
SSDEEP
3072:UR/XrbBTWQvLhQBBT5FpBKmdrW6yqjkG0mAOK5J3gOMSbyzB:UR/X/BCQvL6fT5F3Nq6/OMSuzB
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
?_MixGetStylePathFromReg@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?SaveTiff@CkgImgDIB@@UEAAHAEAVCFile@@H@Z
??0CkgImgDIB@@QEAA@XZ
??1CkgImgDIB@@UEAA@XZ
?CreateDIB@CkgImgDIB@@QEAAHPEAUtagBITMAPINFO@@PEAEG@Z
?SaveJPG@CkgImgDIB@@UEAAHAEAVCFile@@HH@Z
?_kLoadMxFileAtt@@YAHPEB_WPEAVCMxFileAtt@@PEAVCMxProp@@QEAD@Z
?ckDup@CMxSubGrp@@QEAAPEAV1@XZ
?_kLoadOldVFileAtt@@YAHPEB_WPEAVCMxFileAtt@@PEAVCMxProp@@QEAD@Z
?_kCheckOvfSaveEnable@@YAHPEAVCMxBase@@E@Z
?ckGetDxfFile_LayoutNameList@@YAHPEB_WAEAVCStringArray@@@Z
??0CMixDocBase@@IEAA@H@Z
?ckGetDBase@CMixDocBase@@QEAAAEAVCMxBase@@XZ
?thisEntGrpRoot@CMixDocBase@@QEAAPEAVCMxEntGrp@@XZ
?thisEntGrp@CMixDocBase@@QEAAPEAVCMxEntGrp@@XZ
??1CMixDocBase@@UEAA@XZ
?ckLoadDef@CMxSymb@@UEAAXPEAVCMxBase@@H@Z
??0CMxSymb@@QEAA@XZ
??1CMxSymb@@UEAA@XZ
?kSetDCLType@CKLType@@QEAAXN@Z
?kMixLoadEnv@@YAHPEB_WH@Z
?rgb_tbl@CKUi@@SAPEAKXZ
?rgbRs@CKUi@@SAPEAKXZ
?ckWriteSymbOldV@CMxBase@@QEAAXPEAVCFile@@PEAVCMxSymb@@@Z
?ckLoadParamFile@CMxDxfConvPrms@@QEAAHPEB_W@Z
?ckSaveParamFile@CMxDxfConvPrms@@QEAAHPEB_W@Z
??1CMxDxfConvPrms@@UEAA@XZ
?thisDbBase@CMixDocBase@@UEAAPEAVCMxBase@@XZ
?coGetReg2D@CMixDocBase@@UEAAHPEAVCKDReg2D@@HHH@Z
?OnGetEmbeddedItem@CMixDocBase@@MEAAPEAVCOleServerItem@@XZ
?OnNewDocument@CMixDocBase@@MEAAHXZ
?GetInterfaceMap@CMixDocBase@@MEBAPEBUAFX_INTERFACEMAP@@XZ
?GetDispatchMap@CMixDocBase@@MEBAPEBUAFX_DISPMAP@@XZ
?GetMessageMap@CMixDocBase@@MEBAPEBUAFX_MSGMAP@@XZ
?OnFinalRelease@CMixDocBase@@UEAAXXZ
?Serialize@CMixDocBase@@UEAAXAEAVCArchive@@@Z
?GetRuntimeClass@CMixDocBase@@UEBAPEAUCRuntimeClass@@XZ
?sm_bV4PiwCnvMode@_CKMVar@@2HA
?sm_bNotConvSymb2Block@_CKMVar@@2HA
?sm_bDoguFile@_CKMVar@@2HA
?sm_bChxRefEntExt@_CKMVar@@2HA
?sm_LTtables@CKLType@@2PAUtagMxLTypeData@@A
?sm_rgbCxs@CKUi@@2PAKA
?sm_rgbExs@CKUi@@2PAKA
?sm_rgbBkg@CKUi@@2KA
?sm_rgbFrg@CKUi@@2KA
?sm_ckLType@CKDC@@2VCKLType@@A
?iniIn@MCOLOR@@QEAAXK@Z
?muStrU2A@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PEB_W@Z
?ckWriteOldV@CMxBase@@QEAAXAEAVCArchive@@@Z
?ckAppendOldV@CMxBase@@QEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAUtagDVT2D@@NNNNNHHHHGHPEAVCKDReg2D@@HH@Z
?ckAppendPreOldV@CMxBase@@QEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAUtagDVT2D@@PEAHAEAVCMxProp@@PEAVCKDReg2D@@HPEAN@Z
?ckReadOldV@CMxBase@@QEAAHAEAVCArchive@@HHH@Z
?ckWrite@CMxBase@@QEAAXAEAVCArchive@@@Z
?ckRead@CMxBase@@QEAAHAEAVCArchive@@HHH@Z
?ckWriteSymb@CMxBase@@QEAAXPEAVCFile@@PEAVCMxSymb@@@Z
?ckAppend@CMxBase@@QEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAUtagDVT2D@@NNNNNHHHHGHPEAVCKDReg2D@@HHH@Z
?ckAppendPre@CMxBase@@QEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAUtagDVT2D@@PEAHAEAVCMxProp@@PEAVCKDReg2D@@HPEAN@Z
?ckGetReg2DRef@CMxBase@@QEAAHPEAVCKDReg2D@@@Z
?ckGetReg2D@CMxBase@@QEAAHPEAVCKDReg2D@@@Z
?ckWriteCnvLogFile@CMxBase@@QEAAHG@Z
?ckSortGetSelAr@CMxBase@@QEAAHAEAVCKIntAr@@@Z
?ckGetEntCn@CMxBase@@QEAAHXZ
?ckGetEntData@CMxBase@@QEAAPEAPEAVCMxEnt@@XZ
?ckReadDXF@CMxEntGrp@@QEAAHPEB_W0HHH@Z
?ckWriteDXF@CMxEntGrp@@QEAAHPEB_W0@Z
?_ckGetIArBlcok@CMxEntGrp@@QEAAHHPEAHAEAVCKIntAr@@AEAHH@Z
?_ckSepBlock@CMxEntGrp@@QEAAHHPEAHAEAVCPtrArray@@H@Z
?_ckGetSelMxSymb@CMxEntGrp@@QEAAPEAVCMxSymb@@PEAH@Z
?ckDrawToDIB@CMxEntGrp@@QEAAPEAUHBITMAP__@@HHHPEAPEAUtagBITMAPINFO@@PEAPEADPEAVCKDReg2D@@@Z
?ckDel@CMxEntGrp@@QEAAHHPEAHH00PEAVCKDReg2D@@@Z
?ckInc@CMxEntGrp@@QEAAHPEAVCMxEnt@@HHPEAVCKDReg2D@@@Z
?ckGetReg2D_DrawLayer@CMxEntGrp@@QEAAHPEAVCKDReg2D@@@Z
?ckGetReg2DCline@CMxEntGrp@@QEAAHPEAVCKDReg2D@@@Z
?ckGetEntCn@_CMdEntGrp@@QEAAHXZ
?ckGetEntData@_CMdEntGrp@@QEAAPEAPEAVCMxEnt@@XZ
?ckEmptySel@_CMeEntGrp@@QEAAXXZ
?kIncCnAr@CKSelCnAr@@QEAAXHH@Z
??1CKIntAr@@QEAA@XZ
??0CKIntAr@@QEAA@H@Z
?s_ckRevisionStrToNum@CMxHead@@SAHPEAD@Z
?ckInitStDefFill@CMxDef@@QEAAXXZ
??1CMxProp@@QEAA@XZ
??0CMxProp@@QEAA@XZ
?ckDup@CMxProp@@QEAAPEAV1@XZ
?ckInit@CMxFileAtt@@QEAAXXZ
??1CMxFileAtt@@QEAA@XZ
?kExpand@CKDReg2D@@QEAAXAEAV1@@Z
??0CMxDef@@QEAA@XZ
?cxGetFontID@CMxFont@@QEAAHPEB_WHH@Z
?sm_nCalcPrecision@_CKMVar@@2HA
?sm_nLenPrecision@_CKMVar@@2HA
?sm_nAngPrecision@_CKMVar@@2HA
?ClearText@CMpwTextArray@@QEAAXXZ
?MpwWrite@CMpwText@@UEAAXPEAVCMpwEnv@@@Z
?MpwWrite@CMpwArcCirc@@UEAAXPEAVCMpwEnv@@@Z
?MpwWrite@CMpwObject@@UEAAXPEAVCMpwEnv@@@Z
??1CMxEnv@@QEAA@XZ
?kGetLStyleArray@CMxEnv@@QEAAAEAV?$CArray@VCMxEnvLStyle@@AEAV1@@@XZ
?kSetUnitLenth@CMxEnv@@QEAAXH@Z
?kGetUnitLenth@CMxEnv@@QEAAHXZ
?kSetEnvDimMode_ordd@CMxEnv@@QEAAXH@Z
?ckOnPenWidthChxed@CMxEnv@@QEAAXXZ
?_ckOnNewEnvSnap@CMxEnv@@QEAAXXZ
?ckSetPScale@CMxEnv@@QEAAXHNPEBD@Z
??4CMxEnv@@QEAAXAEBV0@@Z
??0CMxEnv@@QEAA@XZ
??0CMxDxfConvPrms@@QEAA@XZ
ord4913
ord5380
ord14227
ord959
ord345
ord1047
ord4638
ord2795
ord962
ord13597
ord12932
ord1428
ord323
ord1039
ord13697
ord2779
ord5408
ord5981
ord8772
ord5376
ord12256
ord10941
ord8093
ord7395
ord2767
ord13023
ord2511
ord12100
ord12341
ord4549
ord9175
ord3947
ord14132
ord10827
ord10828
ord9054
ord11432
ord9670
ord2270
ord839
ord5541
ord6704
ord5973
ord1880
ord12369
ord14148
ord6115
ord13469
ord11776
ord3998
ord10123
ord8118
ord10412
ord8913
ord9947
ord10716
ord5090
ord12467
ord12215
ord11215
ord12690
ord11469
ord8878
ord11096
ord9825
ord5262
ord5554
ord11178
ord9095
ord9098
ord11102
ord10882
ord9968
ord3310
ord3801
ord10960
ord3728
ord3739
ord5937
ord10027
ord2663
ord12644
ord5197
ord5190
ord5391
ord10670
ord10717
ord10961
ord10935
ord11176
ord9181
ord1427
ord12111
ord14299
ord2801
ord6707
ord12267
ord11644
ord488
ord5328
ord6309
ord320
ord2357
ord8452
ord8416
ord2903
ord12464
ord5326
ord482
ord7068
ord1390
ord13596
ord916
ord1120
ord8058
ord12600
ord8451
ord12563
ord4511
ord2909
ord12926
ord1510
ord1034
ord316
ord2344
ord1489
ord2212
ord5709
ord1503
ord277
ord290
ord286
ord280
ord285
ord2921
ord12240
ord4946
ord4181
ord266
ord265
ord4656
ord1670
ord1667
ord1501
ord1033
ord296
ord1491
ord7393
ord1450
ord8084
ord11929
ord10124
ord12606
ord12544
ord4445
ord7716
ord8023
ord5183
ord2439
ord12223
ord12222
ord14210
ord7650
ord14216
ord9089
ord4011
ord3949
ord12625
ord7668
ord2011
ord11665
ord11664
ord14088
ord12212
ord7719
ord14288
ord6121
ord14290
ord6123
ord14289
ord6122
ord983
ord6614
ord3731
ord5706
ord11921
ord7920
ord11933
ord11901
ord5080
ord5363
ord5552
ord9041
ord5339
ord5555
ord5083
ord5229
ord5062
ord7460
ord7461
ord7450
ord5227
ord7922
ord9941
ord8900
ord8891
ord2815
ord1492
ord324
ord1040
ord2327
ord2369
ord2372
ord2338
ord2371
ord473
ord2234
ord2336
ord2161
ord2266
ord2360
ord8167
OutputDebugStringW
GetPrivateProfileStringW
GetFileAttributesW
GetSystemDirectoryW
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
GetPrivateProfileIntW
DeleteFileW
GetTempPathW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LocalAlloc
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CreateEventW
GetModuleHandleW
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
DeleteObject
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
__std_terminate
memcpy
memset
_purecall
__CxxFrameHandler4
__stdio_common_vswscanf
strcmp
_wcsicmp
isalpha
strcpy_s
wcsncpy
_wtof
_wtoi
_configure_narrow_argv
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo
_errno
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
terminate
_seh_filter_dll
_register_onexit_function
_wmakepath
_wsplitpath
free
_time64
_localtime64_s
atan2
??0CABCPdfLicense@@QEAA@$$QEAV0@@Z
??0CABCPdfLicense@@QEAA@AEBV0@@Z
??0CMpwArcCirc@@QEAA@$$QEAV0@@Z
??0CMpwArcCirc@@QEAA@AEBV0@@Z
??0CMpwArcCirc@@QEAA@XZ
??0CMpwLine@@QEAA@$$QEAV0@@Z
??0CMpwLine@@QEAA@AEBV0@@Z
??0CMpwLine@@QEAA@XZ
??0CMpwObject@@QEAA@$$QEAV0@@Z
??0CMpwObject@@QEAA@AEBV0@@Z
??0CMpwObject@@QEAA@XZ
??0CMpwTerm@@QEAA@$$QEAV0@@Z
??0CMpwTerm@@QEAA@AEBV0@@Z
??0CMpwTerm@@QEAA@XZ
??0CMpwText@@QEAA@XZ
??0CMpwTextArray@@QEAA@XZ
??1CABCPdfLicense@@QEAA@XZ
??1CMpwEnv@@QEAA@XZ
??1CMpwText@@QEAA@XZ
??1CMpwTextArray@@QEAA@XZ
??4CABCPdfLicense@@QEAAAEAV0@$$QEAV0@@Z
??4CABCPdfLicense@@QEAAAEAV0@AEBV0@@Z
??4CMpwArcCirc@@QEAAAEAV0@$$QEAV0@@Z
??4CMpwArcCirc@@QEAAAEAV0@AEBV0@@Z
??4CMpwHead@@QEAAAEAV0@$$QEAV0@@Z
??4CMpwHead@@QEAAAEAV0@AEBV0@@Z
??4CMpwLine@@QEAAAEAV0@$$QEAV0@@Z
??4CMpwLine@@QEAAAEAV0@AEBV0@@Z
??4CMpwObject@@QEAAAEAV0@$$QEAV0@@Z
??4CMpwObject@@QEAAAEAV0@AEBV0@@Z
??4CMpwTerm@@QEAAAEAV0@$$QEAV0@@Z
??4CMpwTerm@@QEAAAEAV0@AEBV0@@Z
??_7CMpwArcCirc@@6B@
??_7CMpwLine@@6B@
??_7CMpwObject@@6B@
??_7CMpwTerm@@6B@
??_7CMpwText@@6B@
?Dup@CMpwText@@QEAAXPEAV1@@Z
?GetColFill@CABCPdfEnv@@QEAAHXZ
?GetColHatch@CABCPdfEnv@@QEAAHXZ
?GetColor@CMpwObject@@QEAAHXZ
?GetContentCnt@CABCPdfEnv@@QEAAHXZ
?GetEnableLineWidth@CABCPdfEnv@@QEAAHXZ
?GetLayer@CMpwObject@@QEAAHXZ
?GetLineType@CMpwObject@@QEAAHXZ
?GetMonochrome@CABCPdfEnv@@QEAAHXZ
?GetObjectType@CMpwObject@@QEAAHXZ
?GetOffset@CABCPdfEnv@@QEAA?AUtagDVT2D@@XZ
?GetOutCLine@CABCPdfEnv@@QEAAHXZ
?GetPaintPitch@CABCPdfEnv@@QEAANXZ
?GetPaperRect@CABCPdfEnv@@QEAAHXZ
?GetRasterPitch@CABCPdfEnv@@QEAANXZ
?GetStroke2TTF@CABCPdfEnv@@QEAAHXZ
?GetStroke2TTFName@CABCPdfEnv@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?IsEmpty@CMpwText@@QEAAHXZ
?IsEnablePenColor@CMpwEnv@@QEAAHXZ
?IsFull@CMpwText@@QEAAHXZ
?MpwWrite@CMpwHead@@QEAAXPEAVCMpwEnv@@@Z
?SetColor@CMpwObject@@QEAAXH@Z
?SetCoodCvRate@CMpwEnv@@QEAAXN@Z
?SetFixTextAttr@CABCPdfEnv@@QEAAXKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?SetGroupNumber@CMpwObject@@QEAAXH@Z
?SetHalfWidth@CMpwText@@QEAAXXZ
?SetLayer@CMpwObject@@QEAAXH@Z
?SetLineType@CMpwObject@@QEAAXH@Z
?SetMarkupLayer@CABCPdfEnv@@QEAAXXZ
?SetObjectType@CMpwObject@@QEAAXH@Z
?SetOffset@CABCPdfEnv@@QEAAXUtagDVT2D@@@Z
?SetPaperRect@CABCPdfEnv@@QEAAXH@Z
?SetScale@CMpwHead@@QEAAXN@Z
CheckResource
ClearOvLog
CvDataMix
CvViToMd
DlgDxfParam
DlgOldvState
GetDxfLayoutCnt
GetDxfLayoutName
GetDxfPrmOldCnv
GetDxfPrmPaper
GetVersionPIW
InitCvMix
KillCvList
MakeCvList
SavePict
SetDXFParam
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ