Extended Key Usages
ExtKeyUsageTimeStamping
Overview
overview
3Static
static
COL服务�...OL.exe
windows7-x64
3COL服务�...OL.exe
windows10-2004-x64
3COL服务�...xe.xml
windows7-x64
1COL服务�...xe.xml
windows10-2004-x64
1COL服务�...rk.dll
windows7-x64
1COL服务�...rk.dll
windows10-2004-x64
1COL服务�...F6.dll
windows7-x64
1COL服务�...F6.dll
windows10-2004-x64
1COL服务�...ta.dll
windows7-x64
1COL服务�...ta.dll
windows10-2004-x64
1COL服务�...on.dll
windows7-x64
1COL服务�...on.dll
windows10-2004-x64
1COL服务�...or.bat
windows7-x64
3COL服务�...or.bat
windows10-2004-x64
1COL服务�...er.bat
windows7-x64
1COL服务�...er.bat
windows10-2004-x64
1COL服务�...ha.exe
windows7-x64
3COL服务�...ha.exe
windows10-2004-x64
3COL服务�...ma.exe
windows7-x64
3COL服务�...ma.exe
windows10-2004-x64
3COL服务�...84.doc
windows7-x64
1COL服务�...84.doc
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
COL服务端8.4.2/COL服务端8.4.2/COL.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
COL服务端8.4.2/COL服务端8.4.2/COL.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
COL服务端8.4.2/COL服务端8.4.2/COL.exe.xml
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
COL服务端8.4.2/COL服务端8.4.2/COL.exe.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/EntityFramework.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/EntityFramework.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/MySql.Data.Entity.EF6.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/MySql.Data.Entity.EF6.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/MySql.Data.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/MySql.Data.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/Newtonsoft.Json.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
COL服务端8.4.2/COL服务端8.4.2/Library/Newtonsoft.Json.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/patch_generator.bat
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/patch_generator.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/restarter.bat
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/restarter.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/ucsbuildsha.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/ucsbuildsha.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/ucsgflzma.exe
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
COL服务端8.4.2/COL服务端8.4.2/Tools/ucsgflzma.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
COL服务端8.4.2/COL服务端8.4.2/~$64403484.doc
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
COL服务端8.4.2/COL服务端8.4.2/~$64403484.doc
Resource
win10v2004-20220812-en
Target
87ca1b8254b2aa8b0d4d74e8c65cf8730a379911704df428d5bcf9dd50ac9a2a
Size
3.3MB
MD5
3ca97de8342aca58826ee0fb00fe0e2f
SHA1
a768310e47da37da65b25cdfb06f8514f5df1872
SHA256
87ca1b8254b2aa8b0d4d74e8c65cf8730a379911704df428d5bcf9dd50ac9a2a
SHA512
dce2702fb1f33b404246a11d05b82feff98f01985d80df61259b3d949213fba98c2ed01359970c46cd6854d5cb276ba81ff413258713b3f3baddab87a69f6081
SSDEEP
98304:0oU6boOlDMMH9He4b4yutSuXdgxmTaCjFcu:ZLboQDZ1b4yutSuKxujmu
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ